felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-03-03 12:20:10 +00:00
parent 0b0d58ab03
commit 3ff8e3847d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
37 changed files with 95 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/groups/gnome/gnome-shell
View file

@ -505,11 +505,11 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
/usr/share/libinput*/{,**/}[0-9][0-9]-*.quirks r,
/usr/share/libinput*/libinput/ r,
/usr/share/libwacom/{,*.stylus,*.tablet} r,
/usr/share/pipewire/client.conf r,
/usr/share/plymouth/*.png r,
/usr/share/wallpapers/** r,
/usr/share/wayland-sessions/{,*.desktop} r,
/usr/share/xml/iso-codes/iso_[0-9]*-[0-9]*.xml r,
/usr/share/gnome-packagekit/icons/hicolor/{,**} r,
# freedesktop.org-strict
/usr/share/*ubuntu/applications/{,**} r,
@ -518,6 +518,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
/.flatpak-info r,
/etc/fstab r,
/etc/udev/hwdb.bin r,
/etc/pipewire/client.conf.d/{,**} r,
/etc/xdg/menus/gnome-applications.menu r,
/var/lib/gdm{3,}/.cache/ w,
@ -637,11 +638,6 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/scaling_cur_freq r,
@{sys}/devices/virtual/net/*/statistics/{rx_bytes,tx_bytes} r,
owner @{PROC}/@{pid}/comm r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/task/@{pid}/cmdline r,
@{PROC}/ r,
@{PROC}/@{pid}/attr/current r,
@{PROC}/@{pid}/cgroup r,
@ -652,6 +648,12 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
@{PROC}/1/cgroup r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/osrelease r,
@{PROC}/sys/net/ipv{4,6}/conf/all/disable_ipv{4,6} r,
owner @{PROC}/@{pid}/comm r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/task/@{pid}/cmdline r,
/dev/input/event[0-9]* rw,
/dev/media[0-9]* rw,