felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Profiles update and general fixes.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-09 14:47:06 +01:00
parent 04a833beb4
commit 17806e9ee7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
11 changed files with 43 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/gnome/gnome-shell
View file

@ -36,8 +36,12 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
/{usr/,}{lib,libexec}/polkit-1/polkit* rPx,
/{usr/,}{lib,libexec}/* rPUx,
/usr/share/backgrounds/{,**} r,
/usr/share/desktop-directories/{,*.directory} r,
/usr/share/gdm/greeter-dconf-defaults r,
/usr/share/gdm/greeter/applications/{,**} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/glvnd/egl_vendor.d/{,*.json} r,
/usr/share/gnome-shell/{,**} r,
/usr/share/libgweather/Locations.xml r,
/usr/share/libinput/ r,
@ -47,9 +51,13 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
/usr/share/xml/iso-codes/iso_[0-9]*-[0-9]*.xml r,
/usr/share/xsessions/{,*.desktop} r,
/etc/fstab r,
/etc/machine-id r,
/var/lib/dbus/machine-id r,
/var/lib/gdm/.config/pulse/client.conf r,
/var/lib/gdm/.local/share/applications/{,**} r,
owner @{HOME}/@{XDG_WALLPAPERS_DIR}/{,**} r,
owner @{HOME}/.mozilla/firefox/firefox-mpris/{,*} r,
@ -64,11 +72,14 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
/usr/share/dconf/profile/gdm r,
/var/lib/gdm/.config/dconf/user r,
owner @{run}/user/[0-9]*/gnome-shell/{,**} rw,
owner @{run}/user/[0-9]*/gnome-shell-disable-extensions rw,
owner @{run}/user/[0-9]*/wayland-[0-9].lock rwk,
owner @{run}/user/[0-9]*/gdm/Xauthority r,
owner @{run}/user/[0-9]*/.mutter-Xwaylandauth.[0-9A-Z]* rw,
@{run}/systemd/users/[0-9]* r,
@{run}/systemd/sessions/[0-9] r,
@ -111,6 +122,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/[0-9]*/fd/ r,
owner @{PROC}/[0-9]*/cgroup r,
owner @{PROC}/[0-9]*/mounts r,
owner @{PROC}/[0-9]*/mountinfo r,
owner @{PROC}/[0-9]*/attr/current r,
@{PROC}/[0-9]*/stat r,
@{PROC}/[0-9]*/task/[0-9]*/stat r,