felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): rewrite user-read/user-write.

Browse source 
See #307
This commit is contained in:
Alexandre Pujol 2024-03-28 16:47:40 +00:00
parent b089a4d2c5
commit 2fc2394bad
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 96 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/apps/imv-wayland
View file

@ -13,7 +13,7 @@ profile imv @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/user-read>
include <abstractions/user-read-strict>
@{exec_path} mr,

2
apparmor.d/groups/browsers/firefox
View file

@ -34,7 +34,7 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
include <abstractions/ssl_certs>
include <abstractions/thumbnails-cache-read>
include <abstractions/user-download-strict>
include <abstractions/user-read>
include <abstractions/user-read-strict>
# userns,

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
View file

@ -26,7 +26,7 @@ profile xdg-desktop-portal-gtk @{exec_path} {
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/thumbnails-cache-read>
include <abstractions/user-download>
include <abstractions/user-download-strict>
include <abstractions/user-write>
unix (send, receive, connect) type=stream peer=(addr="@/tmp/.X11-unix/*", label=gnome-shell),

2
apparmor.d/groups/gnome/loupe
View file

@ -14,6 +14,8 @@ profile loupe @{exec_path} flags=(attach_disconnected) {
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/trash-strict>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
signal (send) set=(kill) peer=loupe//bwrap,

2
apparmor.d/groups/gpg/gpg
View file

@ -13,7 +13,7 @@ profile gpg @{exec_path} {
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/user-read>
include <abstractions/user-read-strict>
capability dac_read_search,

2
apparmor.d/groups/gvfs/gvfsd-dav
View file

@ -14,8 +14,8 @@ profile gvfsd-dav @{exec_path} {
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
include <abstractions/p11-kit>
include <abstractions/user-read>
include <abstractions/user-download-strict>
include <abstractions/user-read-strict>
network inet stream,
network inet6 stream,

2
apparmor.d/groups/kde/kactivitymanagerd
View file

@ -14,7 +14,7 @@ profile kactivitymanagerd @{exec_path} {
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/recent-documents-write>
include <abstractions/user-read>
include <abstractions/user-read-strict>
@{exec_path} mr,

4
apparmor.d/groups/kde/okular
View file

@ -15,8 +15,8 @@ profile okular @{exec_path} {
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/user-read>
include <abstractions/user-write>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
@{exec_path} mr,

2
apparmor.d/groups/whonix/torbrowser
View file

@ -33,7 +33,7 @@ profile torbrowser @{exec_path} flags=(attach_disconnected) {
include <abstractions/ssl_certs>
include <abstractions/thumbnails-cache-read>
include <abstractions/user-download-strict>
include <abstractions/user-read>
include <abstractions/user-read-strict>
# userns,