felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (7)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:59:53 +01:00
parent 7c2c806ffa
commit 2b2c42d23c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
155 changed files with 938 additions and 938 deletions
Download patch file Download diff file Expand all files Collapse all files

68
apparmor.d/profiles-s-z/xinit
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/xinit
@{exec_path} = @{bin}/xinit
profile xinit @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@ -19,44 +19,44 @@ profile xinit @{exec_path} {
signal (send) set=(term, kill) peer=xorg,
signal (send) set=(hup),
/{usr/,}bin/ r,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/{,e}grep rix,
/{usr/,}bin/{m,g,}awk rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/chmod rix,
/{usr/,}bin/date rix,
/{usr/,}bin/head rix,
/{usr/,}bin/id rix,
/{usr/,}bin/mktemp rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/tail rix,
/{usr/,}bin/tempfile rix,
/{usr/,}bin/touch rix,
/{usr/,}bin/which{,.debianutils} rix,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{bin}/{,e}grep rix,
@{bin}/{m,g,}awk rix,
@{bin}/cat rix,
@{bin}/chmod rix,
@{bin}/date rix,
@{bin}/head rix,
@{bin}/id rix,
@{bin}/mktemp rix,
@{bin}/rm rix,
@{bin}/sed rix,
@{bin}/tail rix,
@{bin}/tempfile rix,
@{bin}/touch rix,
@{bin}/which{,.debianutils} rix,
/etc/X11/xinit/xinitrc rix,
/etc/X11/xinit/xserverrc rix,
/{usr/,}bin/dbus-update-activation-environment rix,
@{bin}/dbus-update-activation-environment rix,
/{usr/,}bin/gpgconf rPx,
/{usr/,}bin/run-parts rCx -> run-parts,
/{usr/,}bin/udevadm rCx -> udevadm,
@{bin}/gpgconf rPx,
@{bin}/run-parts rCx -> run-parts,
@{bin}/udevadm rCx -> udevadm,
/{usr/,}bin/flatpak rPUx,
/{usr/,}bin/glxinfo rPx,
/{usr/,}bin/numlockx rPx,
/{usr/,}bin/X rPx,
/{usr/,}bin/xhost rPx,
/{usr/,}bin/Xorg rPx,
/{usr/,}bin/xrdb rPx,
@{bin}/flatpak rPUx,
@{bin}/glxinfo rPx,
@{bin}/numlockx rPx,
@{bin}/X rPx,
@{bin}/xhost rPx,
@{bin}/Xorg rPx,
@{bin}/xrdb rPx,
# Allowed GUI sessions to start
/{usr/,}bin/openbox-session rPx,
/{usr/,}bin/enlightenment_start rPUx,
/{usr/,}bin/sway rPUx,
/{usr/,}bin/ssh-agent rPx,
@{bin}/openbox-session rPx,
@{bin}/enlightenment_start rPUx,
@{bin}/sway rPUx,
@{bin}/ssh-agent rPx,
/etc/X11/{,**} r,
/etc/default/{,*} r,
@ -74,7 +74,7 @@ profile xinit @{exec_path} {
profile run-parts {
include <abstractions/base>
/{usr/,}bin/run-parts mr,
@{bin}/run-parts mr,
/etc/X11/Xsession.d/ r,
/etc/X11/Xresources/ r,
@ -88,7 +88,7 @@ profile xinit @{exec_path} {
profile udevadm {
include <abstractions/base>
/{usr/,}bin/udevadm mr,
@{bin}/udevadm mr,
/etc/udev/udev.conf r,