felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-05 20:45:13 +00:00
parent bf973760fd
commit 319b976beb
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
47 changed files with 118 additions and 100 deletions
Download patch file Download diff file Expand all files Collapse all files

24
apparmor.d/profiles-s-z/xinit
View file

@ -12,13 +12,13 @@ profile xinit @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@{exec_path} mr,
signal (receive) set=(usr1) peer=xorg,
signal (send) set=(term, kill) peer=xorg,
signal (send) set=(hup),
@{exec_path} mr,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{bin}/{,e}grep rix,
@ -86,6 +86,7 @@ profile xinit @{exec_path} {
owner /dev/tty@{int} rw,
owner @{HOME}/.xsession-errors w,
include if exists <local/xinit_run-parts>
}
profile udevadm {
@ -95,25 +96,26 @@ profile xinit @{exec_path} {
/etc/udev/udev.conf r,
owner @{PROC}/@{pid}/stat r,
@{PROC}/cmdline r,
@{PROC}/1/sched r,
@{PROC}/1/environ r,
@{PROC}/sys/kernel/osrelease r,
@{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,
@{run}/udev/data/* r,
@{sys}/bus/ r,
@{sys}/bus/*/devices/ r,
@{sys}/class/ r,
@{sys}/class/*/ r,
@{sys}/devices/**/uevent r,
@{run}/udev/data/* r,
@{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,
@{PROC}/1/environ r,
@{PROC}/1/sched r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/osrelease r,
owner @{PROC}/@{pid}/stat r,
# file_inherit
owner /dev/tty@{int} rw,
owner @{HOME}/.xsession-errors w,
include if exists <local/xinit_udevadm>
}
include if exists <local/xinit>