felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refractor(profiles): change variable stryle in thunderbird.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-15 22:03:51 +01:00
parent 0713599eb4
commit 2d76c6fc31
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 32 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

40
apparmor.d/profiles-s-z/thunderbird
View file

@ -7,12 +7,12 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{thunderbird_name} = thunderbird{,-bin} @{name} = thunderbird{,-bin}
@{thunderbird_lib_dirs} = @{lib}/@{thunderbird_name} @{lib_dirs} = @{lib}/@{name}
@{thunderbird_config_dirs} = @{HOME}/.@{thunderbird_name}/ @{config_dirs} = @{HOME}/.@{name}/
@{thunderbird_cache_dirs} = @{user_cache_dirs}/@{thunderbird_name}/ @{cache_dirs} = @{user_cache_dirs}/@{name}/
@{exec_path} = @{bin}/@{thunderbird_name} @{thunderbird_lib_dirs}/@{thunderbird_name} @{exec_path} = @{bin}/@{name} @{lib_dirs}/@{name}
profile thunderbird @{exec_path} { profile thunderbird @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio> include <abstractions/audio>
@ -87,11 +87,11 @@ profile thunderbird @{exec_path} {
@{bin}/{,ba,da}sh rix, @{bin}/{,ba,da}sh rix,
@{thunderbird_lib_dirs}/{,**} r, @{lib_dirs}/{,**} r,
@{thunderbird_lib_dirs}/*.so mr, @{lib_dirs}/*.so mr,
@{thunderbird_lib_dirs}/glxtest rPx, @{lib_dirs}/glxtest rPx,
@{thunderbird_lib_dirs}/thunderbird-wrapper-helper.sh rix, @{lib_dirs}/thunderbird-wrapper-helper.sh rix,
@{thunderbird_lib_dirs}/vaapitest rPx, @{lib_dirs}/vaapitest rPx,
@{lib}/@{multiarch}/qt5/plugins/kf5/org.kde.kwindowsystem.platforms/KF5WindowSystemX11Plugin.so mr, @{lib}/@{multiarch}/qt5/plugins/kf5/org.kde.kwindowsystem.platforms/KF5WindowSystemX11Plugin.so mr,
@ -146,17 +146,17 @@ profile thunderbird @{exec_path} {
owner @{user_mail_dirs}/ rw, owner @{user_mail_dirs}/ rw,
owner @{user_mail_dirs}/** rwl -> @{user_mail_dirs}/**, owner @{user_mail_dirs}/** rwl -> @{user_mail_dirs}/**,
owner @{thunderbird_config_dirs}/*/ rw, owner @{config_dirs}/*/ rw,
owner @{thunderbird_config_dirs}/*/** rwk, owner @{config_dirs}/*/** rwk,
owner @{thunderbird_config_dirs}/installs.ini rw, owner @{config_dirs}/installs.ini rw,
owner @{thunderbird_config_dirs}/profiles.ini rw, owner @{config_dirs}/profiles.ini rw,
owner @{thunderbird_cache_dirs}/{,**} rw, owner @{cache_dirs}/{,**} rw,
/tmp/ r, /tmp/ r,
/var/tmp/ r, /var/tmp/ r,
owner /tmp/@{thunderbird_name}{,_*}/ rw, owner /tmp/@{name}{,_*}/ rw,
owner /tmp/@{thunderbird_name}{,_*}/* rwk, owner /tmp/@{name}{,_*}/* rwk,
owner /tmp/* rw, owner /tmp/* rw,
owner /tmp/mozilla_*/ rw, owner /tmp/mozilla_*/ rw,
owner /tmp/mozilla_*/* rw, owner /tmp/mozilla_*/* rw,
@ -204,9 +204,9 @@ profile thunderbird @{exec_path} {
# Silencer # Silencer
deny @{HOME}/.mozilla/** mrwkl, deny @{HOME}/.mozilla/** mrwkl,
deny @{thunderbird_config_dirs}/*.*/pepmda/ rw, deny @{config_dirs}/*.*/pepmda/ rw,
deny @{thunderbird_config_dirs}/*.*/pepmda/** rwklmx, deny @{config_dirs}/*.*/pepmda/** rwklmx,
deny @{thunderbird_lib_dirs}/** w, deny @{lib_dirs}/** w,
deny /dev/ r, deny /dev/ r,
deny /dev/urandom w, deny /dev/urandom w,
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r, deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,

10
apparmor.d/profiles-s-z/thunderbird-glxtest
View file

@ -6,11 +6,11 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{thunderbird_name} = thunderbird{,-bin} @{name} = thunderbird{,-bin}
@{thunderbird_lib_dirs} = @{lib}/@{thunderbird_name} @{lib_dirs} = @{lib}/@{name}
@{thunderbird_config_dirs} = @{HOME}/.@{thunderbird_name}/ @{config_dirs} = @{HOME}/.@{name}/
@{exec_path} = @{thunderbird_lib_dirs}/glxtest @{exec_path} = @{lib_dirs}/glxtest
profile thunderbird-glxtest @{exec_path} { profile thunderbird-glxtest @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/dri-common> include <abstractions/dri-common>
@ -23,7 +23,7 @@ profile thunderbird-glxtest @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
owner @{thunderbird_config_dirs}/*/.parentlock rw, owner @{config_dirs}/*/.parentlock rw,
owner /tmp/thunderbird/.parentlock rw, owner /tmp/thunderbird/.parentlock rw,

14
apparmor.d/profiles-s-z/thunderbird-vaapitest
View file

@ -6,11 +6,11 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{thunderbird_name} = thunderbird{,-bin} @{name} = thunderbird{,-bin}
@{thunderbird_lib_dirs} = @{lib}/@{thunderbird_name} @{lib_dirs} = @{lib}/@{name}
@{thunderbird_config_dirs} = @{HOME}/.@{thunderbird_name}/ @{config_dirs} = @{HOME}/.@{name}/
@{exec_path} = @{thunderbird_lib_dirs}/vaapitest @{exec_path} = @{lib_dirs}/vaapitest
profile thunderbird-vaapitest @{exec_path} { profile thunderbird-vaapitest @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/dri-enumerate> include <abstractions/dri-enumerate>
@ -25,12 +25,12 @@ profile thunderbird-vaapitest @{exec_path} {
/etc/igfx_user_feature{,_next}.txt w, /etc/igfx_user_feature{,_next}.txt w,
/etc/libva.conf r, /etc/libva.conf r,
deny owner @{thunderbird_config_dirs}/*/.parentlock rw,
deny owner @{thunderbird_config_dirs}/*/startupCache/** r,
owner /tmp/thunderbird/.parentlock rw, owner /tmp/thunderbird/.parentlock rw,
@{sys}/devices/@{pci}/{irq,resource,revision} r, @{sys}/devices/@{pci}/{irq,resource,revision} r,
deny @{config_dirs}/*/.parentlock rw,
deny @{config_dirs}/*/startupCache/** r,
include if exists <local/thunderbird-vaapitest> include if exists <local/thunderbird-vaapitest>
} }