feat(profiles): replace old [0-9]* glob by @{int}

Beware some [0-9]* glob are actually not proper @{int}.
This commit is contained in:
Alexandre Pujol 2023-08-18 17:09:53 +01:00
parent 8ea4491a56
commit 275d6b6e62
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
368 changed files with 637 additions and 636 deletions

View file

@ -105,7 +105,7 @@ profile gajim @{exec_path} {
@{bin}/{,@{multiarch}-}gcc-[0-9]* rix,
@{bin}/{,@{multiarch}-}g++-[0-9]* rix,
@{bin}/{,@{multiarch}-}ld.bfd rix,
@{lib}/gcc/@{multiarch}/[0-9]*/collect2 rix,
@{lib}/gcc/@{multiarch}/@{int}/collect2 rix,
owner /tmp/cc* rw,
owner /tmp/tmp* rw,

View file

@ -19,7 +19,7 @@ profile games-wesnoth @{exec_path} {
@{exec_path} mrix,
/usr/share/games/wesnoth/[0-9]*/{,**} r,
/usr/share/games/wesnoth/@{int}/{,**} r,
owner @{user_config_dirs}/wesnoth-[0-9]*/{,**} rw,

View file

@ -15,8 +15,8 @@ profile gdk-pixbuf-query-loaders @{exec_path} {
@{exec_path} mr,
@{lib}/gdk-pixbuf-[0-9].[0-9]*/{,*}/loaders.cache.* rw,
@{lib}/gdk-pixbuf-[0-9].[0-9]*/*/loaders.cache rw,
@{lib}/gdk-pixbuf-[0-9].@{int}/{,*}/loaders.cache.* rw,
@{lib}/gdk-pixbuf-[0-9].@{int}/*/loaders.cache rw,
include if exists <local/gdk-pixbuf-query-loaders>
}

View file

@ -20,7 +20,7 @@ profile globaltime @{exec_path} {
owner @{user_config_dirs}/globaltime/globaltimerc{,.*} rw,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/globaltime>
}

View file

@ -48,7 +48,7 @@ profile gpa @{exec_path} {
@{lib}/firefox/firefox rPUx,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/gpa>
}

View file

@ -55,7 +55,7 @@ profile gparted @{exec_path} {
@{PROC}/@{pids}/stat r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile udevadm {

View file

@ -64,7 +64,7 @@ profile gpodder @{exec_path} {
@{lib}/firefox/firefox rPUx,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile open {

View file

@ -16,7 +16,7 @@ profile groups @{exec_path} {
/etc/group r,
/etc/nsswitch.conf r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/groups>
}

View file

@ -22,7 +22,7 @@ profile gsettings @{exec_path} {
/var/lib/gdm{3,}/.config/dconf/user r,
/var/lib/gdm{3,}/greeter-dconf-defaults r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
owner @{run}/user/@{uid}/bus rw,

View file

@ -42,7 +42,7 @@ profile hardinfo @{exec_path} {
@{bin}/python2.[0-9]* rix,
@{bin}/python3.[0-9]* rix,
@{bin}/route rix,
@{bin}/ruby[0-9].[0-9]* rix,
@{bin}/ruby[0-9].@{int} rix,
@{bin}/strace rix,
@{bin}/tr rix,
@{bin}/valgrind{,.bin} rix,
@ -72,10 +72,10 @@ profile hardinfo @{exec_path} {
@{sys}/devices/virtual/dmi/id/* r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]/hwmon[0-9]/temp* r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]/temp* r,
@{sys}/devices/platform/**/hwmon/hwmon[0-9]*/temp* r,
@{sys}/devices/platform/**/hwmon/hwmon[0-9]*/fan* r,
@{sys}/devices/platform/**/hwmon/hwmon@{int}/temp* r,
@{sys}/devices/platform/**/hwmon/hwmon@{int}/fan* r,
@{sys}/devices/pci[0-9]*/**/eeprom r,
@{sys}/devices/pci[0-9]*/**/hwmon/hwmon[0-9]*/temp* r,
@{sys}/devices/pci[0-9]*/**/hwmon/hwmon@{int}/temp* r,
@{sys}/devices/**/power_supply/** r,
@{PROC}/@{pid}/net/wireless r,
@ -118,7 +118,7 @@ profile hardinfo @{exec_path} {
deny /usr/share/gdb/python/** w,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile ccache {

View file

@ -48,7 +48,7 @@ profile hexchat @{exec_path} {
@{lib}/firefox/firefox rPUx,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/hexchat>
}

View file

@ -85,10 +85,10 @@ profile htop @{exec_path} {
@{sys}/class/hwmon/ r,
@{sys}/class/i2c-adapter/ r,
@{sys}/class/power_supply/ r,
@{sys}/devices/**/hwmon[0-9]*/ r,
@{sys}/devices/**/hwmon[0-9]*/{name,temp*} r,
@{sys}/devices/**/hwmon[0-9]*/**/ r,
@{sys}/devices/**/hwmon[0-9]*/**/{name,temp*} r,
@{sys}/devices/**/hwmon@{int}/ r,
@{sys}/devices/**/hwmon@{int}/{name,temp*} r,
@{sys}/devices/**/hwmon@{int}/**/ r,
@{sys}/devices/**/hwmon@{int}/**/{name,temp*} r,
@{sys}/devices/**/hwmon/ r,
@{sys}/devices/**/hwmon/{name,temp*} r,
@{sys}/devices/**/hwmon/**/ r,
@ -98,15 +98,15 @@ profile htop @{exec_path} {
@{sys}/devices/i2c-[0-9]*/name r,
@{sys}/devices/pci[0-9]*/**/i2c-[0-9]*/name r,
@{sys}/devices/platform/*/i2c-[0-9]*/name r,
@{sys}/devices/system/cpu/cpu[0-9]*/online r,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_{cur,min,max}_freq r,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/scaling_{cur,min,max}_freq r,
@{sys}/devices/system/cpu/cpu@{int}/online r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/cpuinfo_{cur,min,max}_freq r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_{cur,min,max}_freq r,
@{sys}/devices/virtual/block/zram[0-9]*/{disksize,mm_stat} r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]*/temp r,
@{sys}/kernel/mm/hugepages/ r,
@{sys}/kernel/mm/hugepages/hugepages-*/nr_hugepages r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/htop>
}

View file

@ -87,7 +87,7 @@ profile hwinfo @{exec_path} {
/dev/ttyS0 r,
/dev/ttyS1 r,
owner /tmp/hwinfo*.txt rw,
@{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/ r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/ r,
}

View file

@ -89,7 +89,7 @@ profile hypnotix @{exec_path} {
owner @{HOME}/.Xauthority r,
# file_inherit
/dev/dri/card[0-9]* rw,
/dev/dri/card@{int} rw,
network inet stream,
network inet6 stream,
}

View file

@ -33,7 +33,7 @@ profile i3lock @{exec_path} {
owner /tmp/tmp.*.png r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/i3lock>
}

View file

@ -38,7 +38,7 @@ profile i3lock-fancy @{exec_path} {
/usr/share/i3lock-fancy/{,*} r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile imagemagic {
@ -63,7 +63,7 @@ profile i3lock-fancy @{exec_path} {
owner /tmp/tmp.*.png rw,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
}

View file

@ -30,7 +30,7 @@ profile im-launch @{exec_path} {
owner @{HOME}/.xinputrc r,
# file inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/im-launch>
}

View file

@ -75,11 +75,11 @@ profile inxi @{exec_path} {
/etc/apt/sources.list.d/{,*.list} r,
/var/log/ r,
/var/log/Xorg.[0-9]*.log r,
/var/log/Xorg.@{int}.log r,
/home/ r,
@{user_share_dirs}/xorg/ r,
@{user_share_dirs}/xorg/Xorg.[0-9]*.log r,
@{user_share_dirs}/xorg/Xorg.@{int}.log r,
# For shell pwd
/root/ r,

View file

@ -43,7 +43,7 @@ profile ip @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/@{pid}/net/igmp{,6} r,
owner @{PROC}/sys/net/ipv{4,6}/route/flush w,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/ip>
}

View file

@ -22,18 +22,18 @@ profile irqbalance @{exec_path} {
@{sys}/devices/pci[0-9]*/**/{class,numa_node,local_cpus,irq} r,
@{sys}/devices/pci[0-9]*/**/{vendor,device,subsystem_vendor,subsystem_device} r,
@{sys}/devices/pci[0-9]*/**/msi_irqs/ r,
@{sys}/devices/system/cpu/cpu[0-9]*/ r,
@{sys}/devices/system/cpu/cpu[0-9]*/cache/index[0-9]*/shared_cpu_map r,
@{sys}/devices/system/cpu/cpu[0-9]*/topology/{,**} r,
@{sys}/devices/system/cpu/cpu@{int}/ r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index[0-9]*/shared_cpu_map r,
@{sys}/devices/system/cpu/cpu@{int}/topology/{,**} r,
@{sys}/devices/system/cpu/isolated r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/ r,
@{sys}/devices/system/node/node[0-9]*/{cpumap,meminfo} r,
@{sys}/devices/system/node/node@{int}/ r,
@{sys}/devices/system/node/node@{int}/{cpumap,meminfo} r,
@{sys}/devices/system/cpu/nohz_full r,
@{PROC}/interrupts r,
@{PROC}/irq/[0-9]*/node r,
@{PROC}/irq/[0-9]*/smp_affinity rw,
@{PROC}/irq/@{int}/node r,
@{PROC}/irq/@{int}/smp_affinity rw,
include if exists <local/irqbalance>
}

View file

@ -23,7 +23,7 @@ profile iw @{exec_path} {
@{sys}/devices/pci[0-9]*/**/ieee80211/phy[0-9]*/index r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/iw>
}

View file

@ -54,9 +54,9 @@ profile jdownloader @{exec_path} {
owner @{HOME}/.oracle_jre_usage/@{hex}.timestamp rw,
owner @{HOME}/.java/.userPrefs/.user.lock.* rwk,
owner @{HOME}/.java/.userPrefs/com/install4j/installations/prefs.xml rw,
owner @{HOME}/.java/fonts/[0-9]*/ rw,
owner @{HOME}/.java/fonts/[0-9]*/fcinfo*.tmp rw,
owner @{HOME}/.java/fonts/[0-9]*/fcinfo-*.properties rw,
owner @{HOME}/.java/fonts/@{int}/ rw,
owner @{HOME}/.java/fonts/@{int}/fcinfo*.tmp rw,
owner @{HOME}/.java/fonts/@{int}/fcinfo-*.properties rw,
owner @{HOME}/.install4j rw,

View file

@ -14,7 +14,7 @@ profile jekyll @{exec_path} {
include <abstractions/nameservice-strict>
@{exec_path} r,
@{bin}/ruby[0-9].[0-9]* rix,
@{bin}/ruby[0-9].@{int} rix,
@{lib}/ruby/gems/*/specifications/ r,
@{lib}/ruby/gems/*/specifications/** r,

View file

@ -52,7 +52,7 @@ profile jgmenu @{exec_path} {
/usr/share/**.desktop r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/jgmenu>
}

View file

@ -100,7 +100,7 @@ profile keepassxc @{exec_path} {
/dev/shm/#@{int} rw,
/dev/tty rw,
/dev/urandom rw,
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
# Silencer
deny @{user_share_dirs}/gvfs-metadata/* r,

View file

@ -32,7 +32,7 @@ profile keepassxc-proxy @{exec_path} {
deny owner @{run}/user/@{uid}/.[a-zA-Z]*/{,s} rw,
deny owner @{run}/user/@{uid}/kpxc_server rw,
deny /dev/shm/org.chromium.* rw,
deny owner /dev/shm/org.mozilla.ipc.[0-9]*.[0-9]* rw,
deny owner /dev/shm/org.mozilla.ipc.@{int}.@{int} rw,
deny owner @{HOME}/.mozilla/** rw,
deny owner @{user_cache_dirs}/mozilla/** rw,
deny owner @{MOUNTS}/.mozilla/** rw,

View file

@ -17,7 +17,7 @@ profile kexec @{exec_path} flags=(complain) {
owner /boot/{initrd.img,vmlinuz}-* r,
@{sys}/firmware/memmap/ r,
@{sys}/firmware/memmap/[0-9]*/{start,end,type} r,
@{sys}/firmware/memmap/@{int}/{start,end,type} r,
@{sys}/kernel/boot_params/data r,
@{PROC}/cmdline r,

View file

@ -65,8 +65,8 @@ profile kodi @{exec_path} {
@{sys}/devices/pci[0-9]*/**/usb[0-9]/{bDeviceClass,idProduct,idVendor} r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{bDeviceClass,idProduct,idVendor} r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/scaling_cur_freq r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_cur_freq r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]*/temp r,
@{run}/udev/data/* r,
@ -84,7 +84,7 @@ profile kodi @{exec_path} {
# file_inherit
/usr/share/kodi/** r,
/sys/devices/virtual/thermal/thermal_zone[0-9]*/temp r,
/sys/devices/system/cpu/cpufreq/policy[0-9]*/scaling_cur_freq r,
/sys/devices/system/cpu/cpufreq/policy@{int}/scaling_cur_freq r,
/home/morfik/.kodi/temp/kodi.log w,
}

View file

@ -23,7 +23,7 @@ profile kvm-ok @{exec_path} {
#/proc/cpuinfo r,
#/dev/kvm r,
#/dev/cpu/[0-9]*/msr r,
#/dev/cpu/@{int}/msr r,
# For shell pwd
/root/ r,

View file

@ -37,7 +37,7 @@ profile labwc @{exec_path} flags=(attach_disconnected) {
owner @{user_config_dirs}/labwc/ r,
owner @{user_config_dirs}/labwc/* r,
owner /dev/shm/wayland.mozilla.ipc.[0-9]* rw,
owner /dev/shm/wayland.mozilla.ipc.@{int} rw,
@{sys}/class/drm/ r,
@{sys}/class/input/ r,
@ -56,7 +56,7 @@ profile labwc @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/c226:[0-9]* r, # for /dev/dri/card*
@{run}/systemd/sessions/* r,
@{run}/systemd/seats/seat[0-9]* r,
@{run}/systemd/seats/seat@{int} r,
@{run}/user/@{uid}/wayland-@{int}.lock k,

View file

@ -41,7 +41,7 @@ profile landscape-sysinfo @{exec_path} {
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mounts r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/landscape-sysinfo>
}

View file

@ -28,7 +28,7 @@ profile landscape-sysinfo.wrapper @{exec_path} {
@{PROC}/loadavg r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/landscape-sysinfo.wrapper>
}

View file

@ -30,7 +30,7 @@ profile light @{exec_path} {
@{sys}/devices/pci[0-9]*/**/backlight/*/brightness rw,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
owner @{HOME}/.xsession-errors w,
include if exists <local/light>

View file

@ -33,7 +33,7 @@ profile light-locker @{exec_path} {
@{sys}/devices/pci[0-9]*/**/subsystem_device r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
include if exists <local/light-locker>
}

View file

@ -106,7 +106,7 @@ profile lightdm @{exec_path} {
@{etc_ro}/environment r,
/etc/default/locale r,
/dev/tty[0-9]* r,
/dev/tty@{int} r,
# Xsession logs
owner @{HOME}/.xsession-errors{,.old} rw,

View file

@ -73,7 +73,7 @@ profile linssid @{exec_path} {
/root/ r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile iw {
@ -90,7 +90,7 @@ profile linssid @{exec_path} {
owner @{HOME}/.linssid.prefs rw,
owner @{HOME}/LinSSID.datalog rw,
owner /tmp/linssid_* rw,
owner /dev/dri/card[0-9]* rw,
owner /dev/dri/card@{int} rw,
}

View file

@ -69,7 +69,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/@{pid}/loginuid rw,
owner @{PROC}/@{pid}/uid_map r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/login>
}

View file

@ -23,11 +23,11 @@ profile lscpu @{exec_path} {
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/cpumap r,
@{sys}/devices/system/node/node@{int}/cpumap r,
owner @{sys}/kernel/cpu_byteorder r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/lscpu>

View file

@ -32,7 +32,7 @@ profile lspci @{exec_path} flags=(attach_disconnected) {
@{sys}/bus/pci/devices/ r,
@{sys}/bus/pci/slots/ r,
@{sys}/bus/pci/slots/[0-9]*/address r,
@{sys}/bus/pci/slots/@{int}/address r,
@{sys}/devices/pci[0-9]*/** r,
@{PROC}/cmdline r,

View file

@ -47,7 +47,7 @@ profile lxappearance @{exec_path} {
/var/lib/dbus/machine-id r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
profile dbus {