felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (7)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:59:53 +01:00
parent 7c2c806ffa
commit 2b2c42d23c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
155 changed files with 938 additions and 938 deletions
Download patch file Download diff file Expand all files Collapse all files

64
apparmor.d/profiles-s-z/x11-xsession
View file

@ -12,39 +12,39 @@ profile x11-xsession @{exec_path} {
include <abstractions/nameservice-strict>
@{exec_path} r,
/{usr/,}bin/{,ba,da}sh rix,
@{bin}/{,ba,da}sh rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/touch rix,
/{usr/,}bin/{,e}grep rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/which{,.debianutils} rix,
/{usr/,}bin/id rix,
/{usr/,}bin/chmod rix,
/{usr/,}bin/date rix,
/{usr/,}bin/{m,g,}awk rix,
/{usr/,}bin/tempfile rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/head rix,
/{usr/,}bin/fold rix,
@{bin}/rm rix,
@{bin}/touch rix,
@{bin}/{,e}grep rix,
@{bin}/cat rix,
@{bin}/which{,.debianutils} rix,
@{bin}/id rix,
@{bin}/chmod rix,
@{bin}/date rix,
@{bin}/{m,g,}awk rix,
@{bin}/tempfile rix,
@{bin}/sed rix,
@{bin}/head rix,
@{bin}/fold rix,
/{usr/,}bin/dbus-update-activation-environment rCx -> dbus,
@{bin}/dbus-update-activation-environment rCx -> dbus,
/{usr/,}bin/gpgconf rCx -> gpg,
/{usr/,}bin/run-parts rCx -> run-parts,
/{usr/,}bin/udevadm rCx -> udevadm,
@{bin}/gpgconf rCx -> gpg,
@{bin}/run-parts rCx -> run-parts,
@{bin}/udevadm rCx -> udevadm,
/{usr/,}bin/flatpak rPUx,
/{usr/,}bin/xrdb rPx,
/{usr/,}bin/numlockx rPx,
/{usr/,}bin/xhost rPx,
/{usr/,}bin/glxinfo rPx,
@{bin}/flatpak rPUx,
@{bin}/xrdb rPx,
@{bin}/numlockx rPx,
@{bin}/xhost rPx,
@{bin}/glxinfo rPx,
# Allowed GUI sessions to start
/{usr/,}bin/openbox-session rPx,
/{usr/,}bin/enlightenment_start rPUx,
/{usr/,}bin/sway rPUx,
/{usr/,}bin/ssh-agent rPx,
@{bin}/openbox-session rPx,
@{bin}/enlightenment_start rPUx,
@{bin}/sway rPUx,
@{bin}/ssh-agent rPx,
owner /tmp/file* rw,
@ -61,7 +61,7 @@ profile x11-xsession @{exec_path} {
profile run-parts {
include <abstractions/base>
/{usr/,}bin/run-parts mr,
@{bin}/run-parts mr,
/etc/X11/Xsession.d/ r,
/etc/X11/Xresources/ r,
@ -76,7 +76,7 @@ profile x11-xsession @{exec_path} {
profile dbus {
include <abstractions/base>
/{usr/,}bin/dbus-update-activation-environment mr,
@{bin}/dbus-update-activation-environment mr,
# file_inherit
owner @{HOME}/.xsession-errors w,
@ -86,9 +86,9 @@ profile x11-xsession @{exec_path} {
profile gpg {
include <abstractions/base>
/{usr/,}bin/gpgconf mr,
@{bin}/gpgconf mr,
/{usr/,}bin/gpg-agent rix,
@{bin}/gpg-agent rix,
owner @{HOME}/@{XDG_GPG_DIR}/ rw,
owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**,
@ -100,7 +100,7 @@ profile x11-xsession @{exec_path} {
profile udevadm {
include <abstractions/base>
/{usr/,}bin/udevadm mr,
@{bin}/udevadm mr,
/etc/udev/udev.conf r,