feat(profiles): replace old [0-9]* glob by @{int}
Beware some [0-9]* glob are actually not proper @{int}.
This commit is contained in:
parent
8ea4491a56
commit
275d6b6e62
368 changed files with 637 additions and 636 deletions
|
|
@ -248,7 +248,7 @@ profile android-studio @{exec_path} {
|
|||
|
||||
# file_inherit
|
||||
owner @{HOME}/.android/avd/** r,
|
||||
/dev/dri/card[0-9]* rw,
|
||||
/dev/dri/card@{int} rw,
|
||||
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -134,16 +134,16 @@ profile calibre @{exec_path} {
|
|||
owner @{user_cache_dirs}/qtshadercache/@{hex} rwl -> @{user_cache_dirs}/qtshadercache/#@{int},
|
||||
owner @{user_cache_dirs}/qtshadercache/#@{int} rw,
|
||||
|
||||
owner @{user_cache_dirs}/gstreamer-[0-9]*/ rw,
|
||||
owner @{user_cache_dirs}/gstreamer-[0-9]*/registry.*.bin{,.tmp@{rand6}} rw,
|
||||
owner @{user_cache_dirs}/gstreamer-@{int}/ rw,
|
||||
owner @{user_cache_dirs}/gstreamer-@{int}/registry.*.bin{,.tmp@{rand6}} rw,
|
||||
|
||||
owner @{user_config_dirs}/qt5ct/{,**} r,
|
||||
|
||||
owner /tmp/calibre_*_tmp_*/{,**} rw,
|
||||
owner /tmp/calibre-*/{,**} rw,
|
||||
owner /tmp/[0-9]*-*/ rw,
|
||||
owner /tmp/[0-9]*-*/** rwl,
|
||||
# owner /tmp/[0-9]*-*/** rwl -> /tmp/[0-9]*-*/**, # newer AA version
|
||||
owner /tmp/@{int}-*/ rw,
|
||||
owner /tmp/@{int}-*/** rwl,
|
||||
# owner /tmp/@{int}-*/** rwl -> /tmp/@{int}-*/**, # newer AA version
|
||||
owner /tmp/* rw,
|
||||
|
||||
owner /dev/shm/#@{int} rw,
|
||||
|
|
@ -167,7 +167,7 @@ profile calibre @{exec_path} {
|
|||
deny owner @{PROC}/@{pid}/oom_{,score_}adj rw,
|
||||
deny @{PROC}/sys/kernel/random/boot_id r,
|
||||
|
||||
owner /dev/tty[0-9]* rw,
|
||||
owner /dev/tty@{int} rw,
|
||||
|
||||
include if exists <local/calibre>
|
||||
}
|
||||
|
|
|
|||
|
|
@ -62,8 +62,8 @@ profile discord @{exec_path} {
|
|||
|
||||
owner @{DISCORD_HOMEDIR}/ rw,
|
||||
owner @{DISCORD_HOMEDIR}/** rwk,
|
||||
owner @{DISCORD_HOMEDIR}/[0-9]*/modules/discord_[a-z]*/*.node mrwk,
|
||||
owner @{DISCORD_HOMEDIR}/[0-9]*/modules/discord_[a-z]*/lib*.so.[0-9] mrw,
|
||||
owner @{DISCORD_HOMEDIR}/@{int}/modules/discord_[a-z]*/*.node mrwk,
|
||||
owner @{DISCORD_HOMEDIR}/@{int}/modules/discord_[a-z]*/lib*.so.[0-9] mrw,
|
||||
|
||||
# Reading of the /proc/ dir is needed to start discord.
|
||||
# Otherwise it returns the following error:
|
||||
|
|
@ -110,7 +110,7 @@ profile discord @{exec_path} {
|
|||
@{lib}/firefox/firefox rPx,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
owner /dev/tty@{int} rw,
|
||||
|
||||
|
||||
profile xdg-mime {
|
||||
|
|
|
|||
|
|
@ -65,7 +65,7 @@ profile filezilla @{exec_path} {
|
|||
/*/*/ r,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
owner /dev/tty@{int} rw,
|
||||
|
||||
include if exists <local/filezilla>
|
||||
}
|
||||
|
|
|
|||
|
|
@ -66,7 +66,7 @@ profile flameshot @{exec_path} {
|
|||
/dev/shm/#@{int} rw,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
owner /dev/tty@{int} rw,
|
||||
|
||||
|
||||
profile open {
|
||||
|
|
|
|||
|
|
@ -93,7 +93,7 @@ profile freetube @{exec_path} {
|
|||
@{bin}/vlc rPx,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
owner /dev/tty@{int} rw,
|
||||
|
||||
|
||||
profile open {
|
||||
|
|
|
|||
|
|
@ -70,7 +70,7 @@ profile spotify @{exec_path} {
|
|||
owner /tmp/@{hex}-@{hex}-@{hex}-@{hex} rw,
|
||||
|
||||
# What's this for?
|
||||
#owner /tmp/[0-9]*.[0-9]*.[0-9]*.[0-9]*-linux-*.zip rw,
|
||||
#owner /tmp/@{int}.@{int}.@{int}.[0-9]*-linux-*.zip rw,
|
||||
|
||||
include if exists <local/spotify>
|
||||
}
|
||||
|
|
|
|||
|
|
@ -88,7 +88,7 @@ profile telegram-desktop @{exec_path} {
|
|||
@{bin}/geany rPx,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
owner /dev/tty@{int} rw,
|
||||
|
||||
|
||||
profile open {
|
||||
|
|
|
|||
|
|
@ -194,7 +194,7 @@ profile vlc @{exec_path} {
|
|||
audit owner @{PROC}/@{pid}/cmdline r,
|
||||
|
||||
/dev/shm/#@{int} rw,
|
||||
owner /dev/tty[0-9]* rw,
|
||||
owner /dev/tty@{int} rw,
|
||||
|
||||
# Silencer
|
||||
deny @{lib}/@{multiarch}/vlc/{,**} w,
|
||||
|
|
@ -217,7 +217,7 @@ profile vlc @{exec_path} {
|
|||
owner @{HOME}/.Xauthority r,
|
||||
|
||||
# file_inherit
|
||||
/dev/dri/card[0-9]* rw,
|
||||
/dev/dri/card@{int} rw,
|
||||
network inet stream,
|
||||
network inet6 stream,
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue