felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update apparmor profiles

Browse source 
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
This commit is contained in:
Mikhail Morfikov 2022-04-24 11:52:42 +02:00 • committed by Alexandre Pujol
parent 85e7f58d3c
commit 35a281d045
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 147 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

26
apparmor.d/profiles-a-f/atril
View file

@ -30,8 +30,12 @@ profile atril @{exec_path} {
@{exec_path} mr,
/usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitNetworkProcess rix,
/usr/lib/x86_64-linux-gnu/webkit2gtk-4.0/WebKitWebProcess rix,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/atril-previewer rPx,
/{usr/,}lib/@{multiarch}/webkit2gtk-4.0/WebKitNetworkProcess rix,
/{usr/,}lib/@{multiarch}/webkit2gtk-4.0/WebKitWebProcess rix,
# Which media files atril should be able to open
/ r,
@ -52,6 +56,7 @@ profile atril @{exec_path} {
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/statm r,
@ -59,24 +64,25 @@ profile atril @{exec_path} {
owner @{PROC}/@{pid}/cgroup r,
@{PROC}/zoneinfo r,
/sys/firmware/acpi/pm_profile r,
/sys/devices/virtual/dmi/id/chassis_type r,
/sys/fs/cgroup/** r,
@{sys}/firmware/acpi/pm_profile r,
@{sys}/devices/virtual/dmi/id/chassis_type r,
@{sys}/fs/cgroup/** r,
/etc/fstab r,
/usr/share/poppler/** r,
/usr/share/poppler/{,**} r,
owner @{user_config_dirs}/atril/ rw,
owner @{user_config_dirs}/atril/* rw,
owner @{user_config_dirs}/atril/{,*} rw,
owner @{user_cache_dirs}/atril/ rw,
owner @{user_cache_dirs}/atril/** rw,
owner @{user_cache_dirs}/atril/{,**} rw,
owner @{user_share_dirs}/gvfs-metadata/home r,
owner @{user_share_dirs}/gvfs-metadata/home-*.log r,
owner /tmp/gtkprint_* rw,
owner /tmp/settings*.ini rw,
owner /tmp/settings*.ini.* rw,
owner /tmp/atril-@{pid}/ rw,
owner /tmp/atril-@{pid}/*/ rw,
owner /tmp/atril-@{pid}/*/mimetype rw,