felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 23:47:16 +00:00
parent f362975ce7
commit 4032ead9b4
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
21 changed files with 40 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/gdm
View file

@ -68,7 +68,7 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
@{run}/systemd/sessions/* r,
@{run}/systemd/users/@{uid} r,
@{run}/udev/data/+drm:card[0-9]-* r, # for screen outputs
@{run}/udev/data/+drm:card@{int}-* r, # For screen outputs
@{run}/udev/data/+pci:* r,
@{run}/udev/data/c226:@{int} r, # for /dev/dri/card*

2
apparmor.d/groups/gnome/gsd-power
View file

@ -58,7 +58,7 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
/var/lib/gdm{3,}/greeter-dconf-defaults r,
@{run}/udev/data/+backlight:* r,
@{run}/udev/data/+drm:card* r,
@{run}/udev/data/+drm:card@{int}-* r, # For screen outputs
@{run}/udev/data/+leds:* r,
@{run}/systemd/inhibit/[0-9]*.ref rw,

3
apparmor.d/groups/gnome/nautilus
View file

@ -97,8 +97,7 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
@{bin}/net rPUx,
@{bin}/tracker3 rPUx,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/libdrm/*.ids r,

4
apparmor.d/groups/gnome/org.gnome.NautilusPreviewer
View file

@ -27,9 +27,7 @@ profile org.gnome.NautilusPreviewer @{exec_path} {
@{bin}/gjs-console r,
@{bin}/xdg-open rPx -> child-open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/usr/share/sushi/org.gnome.NautilusPreviewer.*.gresource r,

4
apparmor.d/groups/gnome/tracker-miner
View file

@ -78,9 +78,7 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
@{run}/blkid/blkid.tab r,
@{run}/mount/utab r,
@{run}/udev/data/c3[0-9]*:@{int} r, # For dynamic assignment range 384 to 511
@{run}/udev/data/c4[0-9]*:@{int} r,
@{run}/udev/data/c5[0-9]*:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{PROC}/@{pid}/cmdline r,
@{PROC}/sys/fs/fanotify/max_user_marks r,