felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): small improvement to steam.

Browse source
This commit is contained in:
Alexandre Pujol 2025-06-21 19:53:26 +02:00
parent 03d7ef5589
commit 226cb23073
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/steam/steam
View file

@ -109,6 +109,7 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted) {
@{runtime_dirs}/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-* rix, @{runtime_dirs}/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-* rix,
@{runtime_dirs}/@{lib}/steam-runtime-tools-@{int}/srt-logger rix, @{runtime_dirs}/@{lib}/steam-runtime-tools-@{int}/srt-logger rix,
@{runtime_dirs}/pressure-vessel/@{bin}/pressure-vessel-* rix, @{runtime_dirs}/pressure-vessel/@{bin}/pressure-vessel-* rix,
@{runtime_dirs}/pressure-vessel/@{bin}/pv-* rix,
@{runtime_dirs}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-* rix, @{runtime_dirs}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/@{multiarch}-* rix,
@{runtime_dirs}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/srt-bwrap rcx -> web, @{runtime_dirs}/pressure-vessel/@{lib}/steam-runtime-tools-@{int}/srt-bwrap rcx -> web,
@{runtime_dirs}/run{,.sh} rix, @{runtime_dirs}/run{,.sh} rix,
@ -370,6 +371,8 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted) {
/dev/hidraw@{int} rw, /dev/hidraw@{int} rw,
/dev/tty rw, /dev/tty rw,
@{att}/dev/dri/renderD128 rw,
include if exists <local/steam_web> include if exists <local/steam_web>
} }
@ -380,6 +383,7 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted) {
capability dac_override, capability dac_override,
capability dac_read_search, capability dac_read_search,
capability sys_ptrace,
unix receive type=stream, unix receive type=stream,

2
apparmor.d/groups/steam/steamerrorreporter
View file

@ -34,8 +34,6 @@ profile steamerrorreporter @{exec_path} flags=(attach_disconnected) {
owner @{tmp}/dumps/ r, owner @{tmp}/dumps/ r,
owner @{tmp}/dumps/*_log.txt rw, owner @{tmp}/dumps/*_log.txt rw,
owner @{PROC}/@{pid}/status r,
include if exists <local/steamerrorreporter> include if exists <local/steamerrorreporter>
} }