felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): use the new hex variable.

Browse source
This commit is contained in:
Alexandre Pujol 2022-09-03 14:43:34 +01:00
parent 5d0c521e44
commit 3b56d3ff0f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
70 changed files with 142 additions and 142 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-s-z/scrcpy
View file

@ -29,7 +29,7 @@ profile scrcpy @{exec_path} {
/var/lib/dbus/machine-id r,
owner @{user_config_dirs}/ibus/bus/{,[0-9a-f]*-unix-wayland-[0-9]} r,
owner @{user_config_dirs}/ibus/bus/{,@{hex}-unix-wayland-[0-9]} r,
include if exists <local/scrcpy>
}

8
apparmor.d/profiles-s-z/sddm
View file

@ -193,10 +193,10 @@ profile sddm @{exec_path} {
owner @{HOME}/.Xauthority-n rw,
owner @{HOME}/.Xauthority rwl -> @{HOME}/.Xauthority-n,
owner @{run}/sddm/\{[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*\}-c w,
owner @{run}/sddm/\{[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*\}-l wl -> @{run}/sddm/\{[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*\}-c,
owner @{run}/sddm/\{[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*\}-n rw,
owner @{run}/sddm/\{[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*\} rwl -> @{run}/sddm/\{[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*\}-n,
owner @{run}/sddm/\{@{uuid}\}-c w,
owner @{run}/sddm/\{@{uuid}\}-l wl -> @{run}/sddm/\{@{uuid}\}-c,
owner @{run}/sddm/\{@{uuid}\}-n rw,
owner @{run}/sddm/\{@{uuid}\} rwl -> @{run}/sddm/\{@{uuid}\}-n,
}

2
apparmor.d/profiles-s-z/steam
View file

@ -131,7 +131,7 @@ profile steam @{exec_path} {
owner /dev/shm/#[0-9]* rw,
owner /dev/shm/fossilize-*-[0-9]*-[0-9]* rw,
owner /dev/shm/u@{uid}-Shm_[0-9a-f]* rw,
owner /dev/shm/u@{uid}-Shm_@{hex} rw,
owner /dev/shm/u@{uid}-ValveIPCSharedObj-Steam rwk,
owner /dev/shm/ValveIPCSHM_@{uid} rw,

2
apparmor.d/profiles-s-z/steam-game
View file

@ -162,7 +162,7 @@ profile steam-game @{exec_path} flags=(attach_disconnected) {
owner /dev/shm/#[0-9]* rw,
owner /dev/shm/mono.* rw,
owner /dev/shm/u@{uid}-Shm_[0-9a-f]* rw,
owner /dev/shm/u@{uid}-Shm_@{hex} rw,
owner /dev/shm/u@{uid}-ValveIPCSharedObj-Steam rwk,
owner /dev/shm/ValveIPCSHM_@{uid} rw,
owner /dev/shm/wine-*-fsync rw,

2
apparmor.d/profiles-s-z/steam-gameoverlayui
View file

@ -41,7 +41,7 @@ profile steam-gameoverlayui @{exec_path} {
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
owner /dev/shm/u@{uid}-Shm_[0-9a-f]* rw,
owner /dev/shm/u@{uid}-Shm_@{hex} rw,
owner /dev/shm/u@{uid}-ValveIPCSharedObj-* rwk,
owner /dev/shm/ValveIPCSHM_@{uid} rw,

2
apparmor.d/profiles-s-z/steam-reaper
View file

@ -26,7 +26,7 @@ profile steam-reaper @{exec_path} {
owner @{user_share_dirs}/gvfs-metadata/{,*} r,
owner @{user_share_dirs}/Steam/userdata/**/remotecache.vdf rw,
owner /dev/shm/u@{uid}-Shm_[0-9a-f]* rw,
owner /dev/shm/u@{uid}-Shm_@{hex} rw,
owner /dev/shm/u@{uid}-ValveIPCSharedObj-Steam rwk,
include if exists <local/steam-reaper>

2
apparmor.d/profiles-s-z/strawberry
View file

@ -89,7 +89,7 @@ profile strawberry @{exec_path} {
owner /tmp/#[0-9]*[0-9] rw,
owner /tmp/*= w,
owner /var/tmp/etilqs_[0-9a-f]* rw,
owner /var/tmp/etilqs_@{hex} rw,
/var/lib/dbus/machine-id r,
/etc/machine-id r,

2
apparmor.d/profiles-s-z/tint2
View file

@ -28,7 +28,7 @@ profile tint2 @{exec_path} {
# Tint2 cache files
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/tint2/ rw,
owner @{user_cache_dirs}/tint2/[0-9a-f]*.png w,
owner @{user_cache_dirs}/tint2/@{hex}.png w,
owner @{user_cache_dirs}/tint2/icon.cache rwk,
# Launcher config files

2
apparmor.d/profiles-s-z/tint2conf
View file

@ -28,7 +28,7 @@ profile tint2conf @{exec_path} {
owner @{user_config_dirs}/tint2/ r,
owner @{user_config_dirs}/tint2/* rw,
owner @{user_cache_dirs}/tint2/[0-9a-f]*.png r,
owner @{user_cache_dirs}/tint2/@{hex}.png r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,

2
apparmor.d/profiles-s-z/update-ca-certificates
View file

@ -40,7 +40,7 @@ profile update-ca-certificates @{exec_path} {
/etc/ca-certificates.conf r,
/etc/ssl/certs/ca-certificates.crt{,.new} rw,
/etc/ssl/certs/*.pem rw,
/etc/ssl/certs/[0-9a-f]*.[0-9] rw,
/etc/ssl/certs/@{hex}.[0-9] rw,
/{usr/,}lib/locale/locale-archive r,

6
apparmor.d/profiles-s-z/vidcutter
View file

@ -88,9 +88,9 @@ profile vidcutter @{exec_path} {
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/qtshadercache/ rw,
owner @{user_cache_dirs}/qtshadercache/#[0-9]*[0-9] rw,
owner @{user_cache_dirs}/qtshadercache/[0-9a-f]* rwl -> @{user_cache_dirs}/qtshadercache/#[0-9]*[0-9],
owner @{user_cache_dirs}/qtshadercache/@{hex} rwl -> @{user_cache_dirs}/qtshadercache/#[0-9]*[0-9],
owner @{user_cache_dirs}/qtshadercache-*-little_endian-*/#[0-9]*[0-9] rw,
owner @{user_cache_dirs}/qtshadercache-*-little_endian-*/[0-9a-f]* rwl -> @{user_cache_dirs}/qtshadercache-*-little_endian-*/#[0-9]*[0-9],
owner @{user_cache_dirs}/qtshadercache-*-little_endian-*/@{hex} rwl -> @{user_cache_dirs}/qtshadercache-*-little_endian-*/#[0-9]*[0-9],
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,
@ -107,7 +107,7 @@ profile vidcutter @{exec_path} {
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,
owner /tmp/vidcutter-[0-9A-F]*-[0-9A-F]*-[0-9A-F]*-[0-9A-F]*-[0-9A-F]* w,
owner /tmp/vidcutter-@{uuid} w,
owner /tmp/#[0-9]*[0-9] rw,
owner /tmp/*.jpg rwl -> /tmp/#[0-9]*[0-9],
owner /tmp/vidcutter/{,*} rw,