feat(profiles): replace old [0-9]* glob by @{int}

Beware some [0-9]* glob are actually not proper @{int}.
This commit is contained in:
Alexandre Pujol 2023-08-18 17:09:53 +01:00
parent 8ea4491a56
commit 275d6b6e62
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
368 changed files with 637 additions and 636 deletions

View file

@ -248,7 +248,7 @@ profile android-studio @{exec_path} {
# file_inherit
owner @{HOME}/.android/avd/** r,
/dev/dri/card[0-9]* rw,
/dev/dri/card@{int} rw,
}

View file

@ -134,16 +134,16 @@ profile calibre @{exec_path} {
owner @{user_cache_dirs}/qtshadercache/@{hex} rwl -> @{user_cache_dirs}/qtshadercache/#@{int},
owner @{user_cache_dirs}/qtshadercache/#@{int} rw,
owner @{user_cache_dirs}/gstreamer-[0-9]*/ rw,
owner @{user_cache_dirs}/gstreamer-[0-9]*/registry.*.bin{,.tmp@{rand6}} rw,
owner @{user_cache_dirs}/gstreamer-@{int}/ rw,
owner @{user_cache_dirs}/gstreamer-@{int}/registry.*.bin{,.tmp@{rand6}} rw,
owner @{user_config_dirs}/qt5ct/{,**} r,
owner /tmp/calibre_*_tmp_*/{,**} rw,
owner /tmp/calibre-*/{,**} rw,
owner /tmp/[0-9]*-*/ rw,
owner /tmp/[0-9]*-*/** rwl,
# owner /tmp/[0-9]*-*/** rwl -> /tmp/[0-9]*-*/**, # newer AA version
owner /tmp/@{int}-*/ rw,
owner /tmp/@{int}-*/** rwl,
# owner /tmp/@{int}-*/** rwl -> /tmp/@{int}-*/**, # newer AA version
owner /tmp/* rw,
owner /dev/shm/#@{int} rw,
@ -167,7 +167,7 @@ profile calibre @{exec_path} {
deny owner @{PROC}/@{pid}/oom_{,score_}adj rw,
deny @{PROC}/sys/kernel/random/boot_id r,
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/calibre>
}

View file

@ -62,8 +62,8 @@ profile discord @{exec_path} {
owner @{DISCORD_HOMEDIR}/ rw,
owner @{DISCORD_HOMEDIR}/** rwk,
owner @{DISCORD_HOMEDIR}/[0-9]*/modules/discord_[a-z]*/*.node mrwk,
owner @{DISCORD_HOMEDIR}/[0-9]*/modules/discord_[a-z]*/lib*.so.[0-9] mrw,
owner @{DISCORD_HOMEDIR}/@{int}/modules/discord_[a-z]*/*.node mrwk,
owner @{DISCORD_HOMEDIR}/@{int}/modules/discord_[a-z]*/lib*.so.[0-9] mrw,
# Reading of the /proc/ dir is needed to start discord.
# Otherwise it returns the following error:
@ -110,7 +110,7 @@ profile discord @{exec_path} {
@{lib}/firefox/firefox rPx,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile xdg-mime {

View file

@ -65,7 +65,7 @@ profile filezilla @{exec_path} {
/*/*/ r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/filezilla>
}

View file

@ -66,7 +66,7 @@ profile flameshot @{exec_path} {
/dev/shm/#@{int} rw,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile open {

View file

@ -93,7 +93,7 @@ profile freetube @{exec_path} {
@{bin}/vlc rPx,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile open {

View file

@ -70,7 +70,7 @@ profile spotify @{exec_path} {
owner /tmp/@{hex}-@{hex}-@{hex}-@{hex} rw,
# What's this for?
#owner /tmp/[0-9]*.[0-9]*.[0-9]*.[0-9]*-linux-*.zip rw,
#owner /tmp/@{int}.@{int}.@{int}.[0-9]*-linux-*.zip rw,
include if exists <local/spotify>
}

View file

@ -88,7 +88,7 @@ profile telegram-desktop @{exec_path} {
@{bin}/geany rPx,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile open {

View file

@ -194,7 +194,7 @@ profile vlc @{exec_path} {
audit owner @{PROC}/@{pid}/cmdline r,
/dev/shm/#@{int} rw,
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
# Silencer
deny @{lib}/@{multiarch}/vlc/{,**} w,
@ -217,7 +217,7 @@ profile vlc @{exec_path} {
owner @{HOME}/.Xauthority r,
# file_inherit
/dev/dri/card[0-9]* rw,
/dev/dri/card@{int} rw,
network inet stream,
network inet6 stream,