felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge b816d33b93 into 9db6bf4a35

Browse source
This commit is contained in:
valoq 2025-09-16 20:42:43 +02:00 • committed by GitHub
commit 1d886af144
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
13 changed files with 271 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

22
apparmor.d/profiles-m-r/pdfattach Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdfattach
profile pdfattach @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdfattach>
}
# vim:syntax=apparmor

22
apparmor.d/profiles-m-r/pdfdetach Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdfdetach
profile pdfdetach @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdfdetach>
}
# vim:syntax=apparmor

21
apparmor.d/profiles-m-r/pdffonts Normal file
View file

@ -0,0 +1,21 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdffonts
profile pdffonts @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdffonts>
}
# vim:syntax=apparmor

22
apparmor.d/profiles-m-r/pdfimages Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdfimages
profile pdfimages @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdfimages>
}
# vim:syntax=apparmor

21
apparmor.d/profiles-m-r/pdfinfo Normal file
View file

@ -0,0 +1,21 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdfinfo
profile pdfinfo @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdfinfo>
}
# vim:syntax=apparmor

22
apparmor.d/profiles-m-r/pdfseparate Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdfseparate
profile pdfseparate @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdfseparate>
}
# vim:syntax=apparmor

23
apparmor.d/profiles-m-r/pdfsig Normal file
View file

@ -0,0 +1,23 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdfsig
profile pdfsig @{exec_path} {
include <abstractions/base>
include <abstractions/ssl_certs>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdfsig>
}
# vim:syntax=apparmor

22
apparmor.d/profiles-m-r/pdftocairo Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdftocairo
profile pdftocairo @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdftocairo>
}
# vim:syntax=apparmor

22
apparmor.d/profiles-m-r/pdftohtml Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdftohtml
profile pdftohtml @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdftohtml>
}
# vim:syntax=apparmor

29
apparmor.d/profiles-m-r/pdftoppm Normal file
View file

@ -0,0 +1,29 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdftoppm
profile pdftoppm @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
owner /tmp/{,**}.ppm w,
owner /tmp/{,**}.png w,
owner /tmp/{,**}.jpg w,
owner /tmp/{,**}.jpeg w,
owner /tmp/{,**}.tiff w,
include if exists <local/pdftoppm>
}
# vim:syntax=apparmor

22
apparmor.d/profiles-m-r/pdftops Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdftops
profile pdftops @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdftops>
}
# vim:syntax=apparmor

2
apparmor.d/profiles-m-r/pdftotext
View file

@ -1,5 +1,5 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,

22
apparmor.d/profiles-m-r/pdfunite Normal file
View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pdfunite
profile pdfunite @{exec_path} {
include <abstractions/base>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,
/usr/share/poppler/{,**} r,
include if exists <local/pdfunite>
}
# vim:syntax=apparmor