felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): replace old [0-9]* glob by @{int}

Browse source 
Beware some [0-9]* glob are actually not proper @{int}.
This commit is contained in:
Alexandre Pujol 2023-08-18 17:09:53 +01:00
parent 8ea4491a56
commit 275d6b6e62
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
368 changed files with 637 additions and 636 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/kde/baloo
View file

@ -25,7 +25,7 @@ profile baloo @{exec_path} {
@{lib}/baloo_file_extractor rix,
/usr/share/hwdata/pnp.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/poppler/{,**} r,
/etc/fstab r,

2
apparmor.d/groups/kde/drkonqi
View file

@ -20,7 +20,7 @@ profile drkonqi @{exec_path} {
@{exec_path} mr,
/usr/share/drkonqi/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
@{run}/user/@{uid}/xauth_@{rand6} rl,

2
apparmor.d/groups/kde/gmenudbusmenuproxy
View file

@ -18,7 +18,7 @@ profile gmenudbusmenuproxy @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/machine-id r,

2
apparmor.d/groups/kde/kaccess
View file

@ -21,7 +21,7 @@ profile kaccess @{exec_path} {
/usr/share/hwdata/pnp.ids r,
/usr/share/icons/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/mime/{,**} r,
/etc/xdg/kdeglobals r,

2
apparmor.d/groups/kde/kactivitymanagerd
View file

@ -17,7 +17,7 @@ profile kactivitymanagerd @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/machine-id r,

2
apparmor.d/groups/kde/kalendarac
View file

@ -25,7 +25,7 @@ profile kalendarac @{exec_path} {
/usr/share/akonadi/firstrun/{,*} r,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,

2
apparmor.d/groups/kde/kauth-backlighthelper
View file

@ -16,7 +16,7 @@ profile kauth-backlighthelper @{exec_path} {
@{exec_path} mr,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
@{sys}/class/backlight/ r,
@{sys}/class/leds/ r,

2
apparmor.d/groups/kde/kauth-chargethresholdhelper
View file

@ -13,7 +13,7 @@ profile kauth-chargethresholdhelper @{exec_path} {
@{exec_path} mr,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
@{sys}/class/power_supply/ r,

2
apparmor.d/groups/kde/kauth-discretegpuhelper
View file

@ -13,7 +13,7 @@ profile kauth-discretegpuhelper @{exec_path} {
@{exec_path} mr,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
include if exists <local/kauth-discretegpuhelper>
}

2
apparmor.d/groups/kde/kauth-fontinst
View file

@ -13,7 +13,7 @@ profile kauth-fontinst @{exec_path} {
@{exec_path} mr,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
include if exists <local/kauth-fontinst>
}

2
apparmor.d/groups/kde/kauth-kded-smart-helper
View file

@ -15,7 +15,7 @@ profile kauth-kded-smart-helper @{exec_path} {
@{bin}/smartctl rPx,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
include if exists <local/kauth-kded-smart-helper>
}

2
apparmor.d/groups/kde/kcminit
View file

@ -18,7 +18,7 @@ profile kcminit @{exec_path} {
@{bin}/xrdb rPx,
@{bin}/xsetroot rPx,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/hwdata/pnp.ids r,
/etc/machine-id r,

8
apparmor.d/groups/kde/kconf_update
View file

@ -29,7 +29,7 @@ profile kconf_update @{exec_path} {
/usr/share/kconf_update/konsole_add_hamburgermenu_to_toolbar.sh rix,
/usr/share/kconf_update/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
@ -49,13 +49,13 @@ profile kconf_update @{exec_path} {
owner @{user_config_dirs}/kmixrc r,
owner @{user_config_dirs}/kscreenlockerrc r,
owner @{user_config_dirs}/ksmserverrc r,
owner @{user_config_dirs}/kwinrc.?????? rwl -> @{user_config_dirs}/#[0-9]*,
owner @{user_config_dirs}/kwinrc.@{rand6} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/kwinrc.lock rwk,
owner @{user_config_dirs}/kwinrulesrc rw,
owner @{user_config_dirs}/kwinrulesrc.?????? rwl -> @{user_config_dirs}/#[0-9]*,
owner @{user_config_dirs}/kwinrulesrc.@{rand6} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/kwinrulesrc.lock rwk,
owner @{user_config_dirs}/kxkbrc rw,
owner @{user_config_dirs}/kxkbrc.?????? rwl -> @{user_config_dirs}/#[0-9]*,
owner @{user_config_dirs}/kxkbrc.@{rand6} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/kxkbrc.lock rwk,
owner @{user_config_dirs}/plasmashellrc r,

8
apparmor.d/groups/kde/kde-powerdevil
View file

@ -21,7 +21,7 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)
@{lib}/drkonqi rPx,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/fstab r,
/etc/xdg/kdeglobals r,
@ -32,11 +32,11 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)
owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/powerdevilrc rwl -> @{user_config_dirs}/#[0-9]*,
owner @{user_config_dirs}/powerdevilrc rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/powerdevilrc rwl,
owner @{user_config_dirs}/powerdevilrc.lock rwk,
owner @{user_config_dirs}/powermanagementprofilesrc r,
owner @{user_config_dirs}/powermanagementprofilesrc rwl -> @{user_config_dirs}/#[0-9]*,
owner @{user_config_dirs}/powermanagementprofilesrc rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/powermanagementprofilesrc.lock rwk,
@{run}/systemd/inhibit/*.ref rw,
@ -49,7 +49,7 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)
@{sys}/class/ r,
@{sys}/class/drm/ r,
@{sys}/bus/ r,
@{sys}/devices/pci[0-9]*/[0-9]*/drm/card[0-9]*/*/status r,
@{sys}/devices/pci[0-9]*/@{int}/drm/card@{int}/*/status r,
/dev/tty rw,
/dev/rfkill r,

8
apparmor.d/groups/kde/kded5
View file

@ -48,7 +48,7 @@ profile kded5 @{exec_path} {
@{lib}/utempter/utempter rPx,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/kconf_update/ r,
/usr/share/kded5/{,**} r,
/usr/share/kf5/kcookiejar/* r,
@ -101,7 +101,7 @@ profile kded5 @{exec_path} {
owner @{user_share_dirs}/icc/{,edid-*} r,
owner @{user_share_dirs}/kcookiejar/#*[0-9] rw,
owner @{user_share_dirs}/kcookiejar/cookies rw,
owner @{user_share_dirs}/kcookiejar/cookies.?????? rwlk,
owner @{user_share_dirs}/kcookiejar/cookies.@{rand6} rwlk,
owner @{user_share_dirs}/kded5/{,**} rw,
owner @{user_share_dirs}/kscreen/{,**} rwl,
owner @{user_share_dirs}/ktp/cache.db rwk,
@ -116,7 +116,7 @@ profile kded5 @{exec_path} {
@{PROC}/@{pids}/cmdline/ r,
@{PROC}/@{pids}/fd/ r,
@{PROC}/@{pids}/fd/info/[0-9]* r,
@{PROC}/@{pids}/fd/info/@{int} r,
@{PROC}/sys/fs/inotify/max_user_{instances,watches} r,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,
@ -135,7 +135,7 @@ profile kded5 @{exec_path} {
@{bin}/pgrep mr,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/ r,
@{PROC}/@{pids}/cgroup r,

2
apparmor.d/groups/kde/kglobalaccel5
View file

@ -16,7 +16,7 @@ profile kglobalaccel5 @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/kglobalaccel/{,**} r,
/usr/share/mime/{,**} r,

2
apparmor.d/groups/kde/kio_http_cache_cleaner
View file

@ -12,7 +12,7 @@ profile kio_http_cache_cleaner @{exec_path} {
@{exec_path} mr,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/qt{5,}/translations/*.qm r,
owner @{user_cache_dirs}/kio_http/* rw,

2
apparmor.d/groups/kde/kioslave5
View file

@ -36,7 +36,7 @@ profile kioslave5 @{exec_path} {
@{lib}/kf5/kio_http_cache_cleaner rPx,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/kservices5/{,**} r,
/usr/share/kservicetypes5/*.desktop r,

2
apparmor.d/groups/kde/kreadconfig
View file

@ -14,7 +14,7 @@ profile kreadconfig @{exec_path} {
@{exec_path} mr,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kioslaverc r,

2
apparmor.d/groups/kde/kscreen_backend_launcher
View file

@ -15,7 +15,7 @@ profile kscreen_backend_launcher @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/dev/tty r,

4
apparmor.d/groups/kde/kscreenlocker-greet
View file

@ -37,7 +37,7 @@ profile kscreenlocker-greet @{exec_path} {
@{lib}/@{multiarch}/libexec/kcheckpass rPx,
/usr/share/hwdata/pnp.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/plasma/** r,
/usr/share/qt/translations/*.qm r,
/usr/share/qt5ct/** r,
@ -93,7 +93,7 @@ profile kscreenlocker-greet @{exec_path} {
@{run}/faillock/[a-zA-z0-9]* rwk,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/@{pid}/cmdline r,
@{PROC}/@{pid}/loginuid r,

2
apparmor.d/groups/kde/ksmserver
View file

@ -32,7 +32,7 @@ profile ksmserver @{exec_path} flags=(attach_disconnected,mediate_deleted) {
/usr/share/color-schemes/{,**} r,
/usr/share/hwdata/pnp.ids r,
/usr/share/icons/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/*.notifyrc r,
/usr/share/kservices5/{,**} r,
/usr/share/mime/{,**} r,

2
apparmor.d/groups/kde/kwalletd5
View file

@ -33,7 +33,7 @@ profile kwalletd5 @{exec_path} {
/usr/share/color-schemes/{,**} r,
/usr/share/hwdata/pnp.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/qt/translations/*.qm r,
/usr/share/qt5/qtlogging.ini r,
/usr/share/qt5ct/** r,

4
apparmor.d/groups/kde/kwin_x11
View file

@ -32,7 +32,7 @@ profile kwin_x11 @{exec_path} {
@{lib}/drkonqi rPx,
/usr/share/hwdata/pnp.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/kwin/{,**} r,
/usr/share/plasma/desktoptheme/{,**} r,
/usr/share/X11/xkb/{,**} r,
@ -75,7 +75,7 @@ profile kwin_x11 @{exec_path} {
owner @{run}/user/@{uid}/xauth_@{rand6} rl,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/sys/kernel/core_pattern r,

4
apparmor.d/groups/kde/plasma-discover
View file

@ -80,8 +80,8 @@ profile plasma-discover @{exec_path} {
owner @{user_share_dirs}/knewstuff3/ r,
owner @{user_share_dirs}/knewstuff3/ w,
owner @{run}/user/@{uid}/#[0-9]* rw,
owner @{run}/user/@{uid}/discover??????.* rwl -> @{run}/user/@{uid}/#[0-9]*,
owner @{run}/user/@{uid}/#@{int} rw,
owner @{run}/user/@{uid}/discover@{rand6}.* rwl -> @{run}/user/@{uid}/#@{int},
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,

6
apparmor.d/groups/kde/plasmashell
View file

@ -53,7 +53,7 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/desktop-directories/kf5-*.directory r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/*.notifyrc r,
/usr/share/konsole/ r,
/usr/share/krunner/{,**} r,
@ -111,7 +111,7 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
owner @{user_config_dirs}/eventviewsrc r,
owner @{user_config_dirs}/kactivitymanagerd-statsrc r,
owner @{user_config_dirs}/{KDE,kde.org}/ rw,
owner @{user_config_dirs}/{KDE,kde.org}/** rwkl -> @{user_config_dirs}/{KDE,kde.org}/#[0-9]*,
owner @{user_config_dirs}/{KDE,kde.org}/** rwkl -> @{user_config_dirs}/{KDE,kde.org}/#@{int},
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdedefaults/plasmarc r,
@ -156,7 +156,7 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
@{sys}/class/ r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/ r,
@{PROC}/sys/kernel/core_pattern r,

4
apparmor.d/groups/kde/sddm
View file

@ -79,7 +79,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
/usr/share/sddm/scripts/Xstop rix,
/usr/share/desktop-base/softwaves-theme/login/*.svg r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/plasma/desktoptheme/** r,
/usr/share/sddm/faces/.*.icon r,
/usr/share/sddm/themes/** r,
@ -146,7 +146,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
owner @{PROC}/@{pid}/uid_map r,
owner @{PROC}/1/limits r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
/dev/tty rw,
profile xauth {

2
apparmor.d/groups/kde/sddm-greeter
View file

@ -29,7 +29,7 @@ profile sddm-greeter @{exec_path} {
/usr/share/desktop-base/softwaves-theme/login/*.svg r,
/usr/share/hwdata/pnp.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/plasma/desktoptheme/** r,
/usr/share/qt5ct/** r,
/usr/share/sddm/{,**} r,

2
apparmor.d/groups/kde/startplasma
View file

@ -22,7 +22,7 @@ profile startplasma @{exec_path} {
/usr/share/color-schemes/{,**} r,
/usr/share/desktop-directories/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/{,**} r,
/usr/share/kservices5/{,**} r,
/usr/share/kservicetypes5/{,**} r,

2
apparmor.d/groups/kde/xdm-xsession
View file

@ -91,7 +91,7 @@ profile xdm-xsession @{exec_path} {
owner @{PROC}/@{pid}/fd/ r,
/dev/tty rw,
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile dbus {
include <abstractions/base>

2
apparmor.d/groups/kde/xembedsniproxy
View file

@ -16,7 +16,7 @@ profile xembedsniproxy @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/icu/@{int}.@{int}/*.dat r,
owner /tmp/xauth_@{rand6} r,