felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update lxqt-config-input

Browse source
This commit is contained in:
Besanon 2024-06-07 12:26:03 +02:00 • committed by GitHub
parent 2f86d21d28
commit 3d7cd64d80
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 15 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

47
apparmor.d/groups/lxqt/lxqt-config-input
View file

@ -10,13 +10,17 @@ include <tunables/global>
@{exec_path} = @{bin}/lxqt-config-input
profile lxqt-config-input @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/gtk>
include <abstractions/video>
include <abstractions/lxqt>
include <abstractions/qt5-shader-cache>
include <abstractions/bus-system>
include <abstractions/bus/org.bluez>
include <abstractions/bus/org.freedesktop.login1>
include <abstractions/devices-usb>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-accessibility-strict>
include <abstractions/gtk>
include <abstractions/gvfs-open>
include <abstractions/lxqt>
include <abstractions/qt5-shader-cache>
include <abstractions/video>
@{exec_path} mr,
@ -26,37 +30,16 @@ profile lxqt-config-input @{exec_path} flags=(complain) {
owner /tmp/@{int} r,
@{run}/udev/data/ r,
@{run}/udev/data/+acpi:* r,
@{run}/udev/data/+bluetooth:* r,
@{run}/udev/data/+hid:* r, # for HID-Compliant Keyboard
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad
@{run}/udev/data/+pci:* r,
@{run}/udev/data/+platform:* r,
@{run}/udev/data/+scsi:* r,
@{run}/udev/data/+sdio:* r,
@{run}/udev/data/+thunderbolt:* r,
@{run}/udev/data/+usb-serial:* r,
@{run}/udev/data/+usb:* r,
@{run}/udev/data/+virtio:* r,
@{run}/udev/data/b254:@{int} r, # for /dev/zram*
@{run}/udev/data/b259:@{int} r,
@{run}/udev/data/c1:@{int} r, # For RAM disk
@{run}/udev/data/c4:@{int} r, # For TTY devices
@{run}/udev/data/c10:@{int} r, # For non-serial mice, misc features
@{run}/udev/data/c108:@{int} r, # For /dev/ppp
@{run}/udev/data/c18[8-9]:@{int} r, # USB devices & USB serial converters
@{run}/udev/data/c203:@{int} r, # CPU CPUID information
@{run}/udev/data/c239:@{int} r, # CPU CPUID information
@{run}/udev/data/c29:@{int} r, # For CD-ROM
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/devices/ r,
@{sys}/class/ r,
@{sys}/bus/ r,
# There are hundreds of files to be accessed - Question: better to deny the few not to be accessed??
@{run}/udev/data/** r,
@{sys}/devices/** r,
@{sys}/class/** r,
@{sys}/bus/** r,
@{sys}/devices/** r,
@{PROC}/sys/kernel/random/boot_id r,
/dev/tty rw,
include if exists <local/lxqt-config-input>