felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (2)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 13:30:27 +01:00
parent bb71f49598
commit 2eed3b725f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
101 changed files with 538 additions and 538 deletions
Download patch file Download diff file Expand all files Collapse all files

30
apparmor.d/groups/bus/dbus-daemon
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/dbus-daemon
@{exec_path} = @{bin}/dbus-daemon
profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
@ -38,21 +38,21 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/{usr/,}bin/ r,
@{bin}/ r,
@{libexec}/{,at-spi2{,-core}/}at-spi2-registryd rPx,
@{libexec}/* rPUx,
@{libexec}/gnome-shell/gnome-shell-calendar-server rPx,
@{libexec}/kauth/* rPx,
@{libexec}/kf5/kiod5 rPUx,
@{libexec}/xfce[0-9]/xfconf/xfconfd rPx,
/{usr/,}bin/[a-z0-9]* rPUx,
/{usr/,}lib{,exec}/dbus-1*/dbus-daemon-launch-helper rPx,
/{usr/,}lib/@{multiarch}/tumbler-1/tumblerd rPUx,
/{usr/,}lib/@{multiarch}/xfce[0-9]/xfconf/xfconfd rPx,
/{usr/,}lib/atril/atrild rPx,
/{usr/,}lib/ibus/ibus-* rPx,
/{usr/,}lib/telepathy/mission-control-5 rPx,
@{bin}/[a-z0-9]* rPUx,
@{lib}/{,at-spi2{,-core}/}at-spi2-registryd rPx,
@{lib}/@{multiarch}/tumbler-1/tumblerd rPUx,
@{lib}/@{multiarch}/xfce[0-9]/xfconf/xfconfd rPx,
@{lib}/* rPUx,
@{lib}/atril/atrild rPx,
@{lib}/dbus-1*/dbus-daemon-launch-helper rPx,
@{lib}/gnome-shell/gnome-shell-calendar-server rPx,
@{lib}/ibus/ibus-* rPx,
@{lib}/kauth/* rPx,
@{lib}/kf5/kiod5 rPUx,
@{lib}/telepathy/mission-control-5 rPx,
@{lib}/xfce[0-9]/xfconf/xfconfd rPx,
/usr/share/gnome-documents/org.gnome.Documents rPx,
/usr/share/org.gnome.Characters/org.gnome.Characters rPx,
/usr/share/org.gnome.Characters/org.gnome.Characters.BackgroundService rPx,

12
apparmor.d/groups/bus/dbus-daemon-launch-helper
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib{,exec}/dbus-1*/dbus-daemon-launch-helper
@{exec_path} = @{lib}/dbus-1*/dbus-daemon-launch-helper
profile dbus-daemon-launch-helper @{exec_path} {
include <abstractions/base>
include <abstractions/app-launcher-root>
@ -18,11 +18,11 @@ profile dbus-daemon-launch-helper @{exec_path} {
@{exec_path} mr,
@{libexec}/{,cups-pk-helper/}cups-pk-helper-mechanism rPx,
@{libexec}/kauth/* rPx,
@{libexec}/language-selector/ls-dbus-backend rPx,
/{usr/,}lib/@{multiarch}/cups-pk-helper-mechanism rPx,
/{usr/,}lib/software-properties/software-properties-dbus rPx,
@{lib}/{,cups-pk-helper/}cups-pk-helper-mechanism rPx,
@{lib}/@{multiarch}/cups-pk-helper-mechanism rPx,
@{lib}/kauth/* rPx,
@{lib}/language-selector/ls-dbus-backend rPx,
@{lib}/software-properties/software-properties-dbus rPx,
/usr/share/org.gnome.Characters/org.gnome.Characters.BackgroundService rPx,
/usr/share/usb-creator/usb-creator-helper rPx,

12
apparmor.d/groups/bus/dbus-run-session
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/dbus-run-session
@{exec_path} = @{bin}/dbus-run-session
profile dbus-run-session @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
@ -16,11 +16,11 @@ profile dbus-run-session @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/dbus-daemon rPx,
/{usr/,}bin/gnome-session rix,
/{usr/,}bin/gnome-shell rPx,
/{usr/,}bin/gsettings rPx,
@{libexec}/gnome-session-binary rPx,
@{bin}/dbus-daemon rPx,
@{bin}/gnome-session rix,
@{bin}/gnome-shell rPx,
@{bin}/gsettings rPx,
@{lib}/gnome-session-binary rPx,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/gdm/greeter-dconf-defaults r,

8
apparmor.d/groups/bus/ibus-daemon
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/ibus-daemon
@{exec_path} = @{bin}/ibus-daemon
profile ibus-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-session-strict>
@ -45,9 +45,9 @@ profile ibus-daemon @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}lib/ibus/ibus-* rPx,
@{libexec}/ibus-* rPx,
@{bin}/{,ba,da}sh rix,
@{lib}/ibus/ibus-* rPx,
@{lib}/ibus-* rPx,
/usr/share/ibus/{,**} r,
/usr/share/ibus-table/tables/ r,

4
apparmor.d/groups/bus/ibus-dconf
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-dconf
@{exec_path} += @{libexec}/ibus-dconf
@{exec_path} = @{lib}/ibus/ibus-dconf
@{exec_path} += @{lib}/ibus-dconf
profile ibus-dconf @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf-write>

4
apparmor.d/groups/bus/ibus-engine-simple
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-engine-simple
@{exec_path} += @{libexec}/ibus-engine-simple
@{exec_path} = @{lib}/ibus/ibus-engine-simple
@{exec_path} += @{lib}/ibus-engine-simple
profile ibus-engine-simple @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/ibus>

2
apparmor.d/groups/bus/ibus-engine-table
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/ibus-engine-table
@{exec_path} = @{lib}/ibus-engine-table
profile ibus-engine-table @{exec_path} {
include <abstractions/base>
include <abstractions/python>

4
apparmor.d/groups/bus/ibus-extension-gtk3
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-extension-gtk3
@{exec_path} += @{libexec}/ibus-extension-gtk3
@{exec_path} = @{lib}/ibus/ibus-extension-gtk3
@{exec_path} += @{lib}/ibus-extension-gtk3
profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-accessibility-strict>

2
apparmor.d/groups/bus/ibus-memconf
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/ibus-memconf
@{exec_path} = @{lib}/ibus-memconf
profile ibus-memconf @{exec_path} {
include <abstractions/base>
include <abstractions/ibus>

8
apparmor.d/groups/bus/ibus-portal
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-portal
@{exec_path} += @{libexec}/ibus-portal
@{exec_path} = @{lib}/ibus/ibus-portal
@{exec_path} += @{lib}/ibus-portal
profile ibus-portal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-session-strict>
@ -29,8 +29,8 @@ profile ibus-portal @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/{usr/,}lib/gio/modules/{,*} r,
/{usr/,}lib/locale/locale-archive r,
@{lib}/gio/modules/{,*} r,
@{lib}/locale/locale-archive r,
/usr/share/locale/locale.alias r,

4
apparmor.d/groups/bus/ibus-x11
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-x11
@{exec_path} += @{libexec}/ibus-x11
@{exec_path} = @{lib}/ibus/ibus-x11
@{exec_path} += @{lib}/ibus-x11
profile ibus-x11 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-session-strict>