felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): ensure steam can update itself.

Browse source
This commit is contained in:
Alexandre Pujol 2024-06-23 11:16:23 +01:00
parent 228d3b653c
commit 2710fd3484
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 73 additions and 53 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/profiles-s-z/steam-runtime
View file

@ -26,7 +26,7 @@ profile steam-runtime @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{sh_path} r,
@{sh_path} rix,
@{bin}/getopt rix,
@{bin}/readlink rix,
@ -34,7 +34,7 @@ profile steam-runtime @{exec_path} flags=(attach_disconnected) {
@{lib_dirs}/steam-launch-wrapper rix,
# Native linux games (steam-game-native)
@{app_dirs}/[^S]*/** rpx -> steam-game-native,
@{app_dirs}/[^S]*/** rpx -> steam-game-native, # Only for @{app_dirs}/@{runtime}/**
# Proton games, sandboxed (steam-game-proton)
@{app_dirs}/@{runtime}/*entry-point rmix,
@ -54,7 +54,7 @@ profile steam-runtime @{exec_path} flags=(attach_disconnected) {
owner @{HOME}/.steam/steam.pipe r,
owner @{app_dirs}/*/ r,
owner @{app_dirs}/config/config.vdf rw,
owner @{app_dirs}/config/config.vdf{,.*} rw,
owner @{app_dirs}/@{runtime}/** r,
owner @{app_dirs}/@{runtime}/pressure-vessel/** rwk,
owner @{app_dirs}/@{runtime}/sniper_platform_*/** rwk,
@ -62,6 +62,9 @@ profile steam-runtime @{exec_path} flags=(attach_disconnected) {
owner link @{app_dirs}/@{runtime}/var/** -> @{app_dirs}/@{runtime}/pressure-vessel/**,
owner link @{app_dirs}/@{runtime}/var/** -> @{app_dirs}/@{runtime}/sniper_platform_*/**,
owner @{share_dirs}/config/config.vdf{,.*} rw,
owner @{share_dirs}/steamapps/appmanifest_* rw,
owner @{tmp}/ r,
owner @{tmp}/#@{int} rw,
owner @{tmp}/vdpau-drivers-@{rand6}/{,**} rw,