felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Various fixes.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-15 22:51:21 +01:00
parent 8fdd8a7b21
commit 370dda124d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
11 changed files with 32 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/gnome/gdm-session-worker
View file

@ -12,9 +12,6 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
include <abstractions/authentication>
include <abstractions/nameservice-strict>
signal (receive) set=term peer=gdm,
signal (send) set=term peer=gdm-wayland-session,
capability audit_write,
capability chown,
capability dac_override,
@ -27,6 +24,10 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
capability sys_nice,
capability sys_tty_config,
signal (send) set=hup peer=gsd-*,
signal (send) set=hup peer=gnome-*,
signal (send) set=hup peer=xwayland,
signal (send) set=term peer=gdm-wayland-session,
signal (receive) set=term peer=gdm,
network netlink raw,
@ -46,6 +47,7 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
/etc/security/limits.d/{,*.conf} r,
/usr/share/gdm/gdm.schemas r,
/usr/share/wayland-sessions/*.desktop r,
@{run}/faillock/[a-zA-z0-9]* rwk,
@{run}/systemd/sessions/[0-9].ref rw,