felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Replace shells with new sh_path variable

Browse source 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
This commit is contained in:
Jeroen Rijken 2024-02-11 15:34:46 +01:00 • committed by Alex
parent 3b1b187d13
commit 40b171ee94
315 changed files with 415 additions and 369 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-g-l/gajim
View file

@ -37,7 +37,7 @@ profile gajim @{exec_path} {
@{exec_path} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/ldconfig rix,
@{bin}/uname rix,

2
apparmor.d/profiles-g-l/ganyremote
View file

@ -27,7 +27,7 @@ profile ganyremote @{exec_path} {
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/rm rix,
@{bin}/{,e}grep rix,
@{bin}/cut rix,

4
apparmor.d/profiles-g-l/git
View file

@ -42,7 +42,7 @@ profile git @{exec_path} {
deny owner @{user_bin_dirs}/ r,
# These are needed for "git submodule update"
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/basename rix,
@{bin}/cat rix,
@ -172,7 +172,7 @@ profile git @{exec_path} {
@{bin}/sensible-editor mr,
@{bin}/vim mrix,
@{bin}/vim.* mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/which{,.debianutils} rix,
/usr/share/vim/{,**} r,

2
apparmor.d/profiles-g-l/gparted
View file

@ -16,7 +16,7 @@ profile gparted @{exec_path} {
@{exec_path} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/{m,g,}awk rix,
@{bin}/cut rix,

2
apparmor.d/profiles-g-l/gpartedbin
View file

@ -30,7 +30,7 @@ profile gpartedbin @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/blkid rPx,
@{bin}/dmidecode rPx,

2
apparmor.d/profiles-g-l/gpo
View file

@ -26,7 +26,7 @@ profile gpo @{exec_path} {
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/uname rix,
@{bin}/pager rPx -> child-pager,
@{bin}/less rPx -> child-pager,

4
apparmor.d/profiles-g-l/gpodder
View file

@ -30,7 +30,7 @@ profile gpodder @{exec_path} {
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/uname rix,
owner @{HOME}/ r,
@ -75,7 +75,7 @@ profile gpodder @{exec_path} {
@{bin}/xdg-open mr,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-g-l/gpodder-migrate2tres
View file

@ -16,7 +16,7 @@ profile gpodder-migrate2tres @{exec_path} {
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/uname rix,
owner @{PROC}/@{pid}/fd/ r,

2
apparmor.d/profiles-g-l/gsmartcontrol-root
View file

@ -13,7 +13,7 @@ profile gsmartcontrol-root @{exec_path} {
include <abstractions/consoles>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/which{,.debianutils} rix,

6
apparmor.d/profiles-g-l/gtk-youtube-viewer
View file

@ -28,7 +28,7 @@ profile gtk-youtube-viewer @{exec_path} {
@{exec_path} r,
@{bin}/perl r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/xterm rCx -> xterm,
@{bin}/rxvt rCx -> xterm,
@ -71,7 +71,7 @@ profile gtk-youtube-viewer @{exec_path} {
@{bin}/urxvt mr,
@{bin}/zsh rix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/youtube-viewer rPx,
@ -101,7 +101,7 @@ profile gtk-youtube-viewer @{exec_path} {
@{bin}/xdg-open mr,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

4
apparmor.d/profiles-g-l/hardinfo
View file

@ -32,7 +32,7 @@ profile hardinfo @{exec_path} {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/gdb rix,
@{bin}/iconv rix,
@{bin}/last rix,
@ -166,7 +166,7 @@ profile hardinfo @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-g-l/hw-probe
View file

@ -22,7 +22,7 @@ profile hw-probe @{exec_path} {
@{bin}/pwd rix,
@{bin}/{,e}grep rix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/sleep rix,
@{bin}/md5sum rix,

2
apparmor.d/profiles-g-l/hwinfo
View file

@ -32,7 +32,7 @@ profile hwinfo @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/kmod rCx -> kmod,
@{bin}/udevadm rCx -> udevadm,

4
apparmor.d/profiles-g-l/hypnotix
View file

@ -38,7 +38,7 @@ profile hypnotix @{exec_path} {
@{exec_path} rix,
@{bin}/python3.@{int} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/ldconfig rix,
@{bin}/mkdir rix,
@ -77,7 +77,7 @@ profile hypnotix @{exec_path} {
@{bin}/xdg-screensaver mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/mv rix,
@{bin}/{,e}grep rix,
@{bin}/sed rix,

2
apparmor.d/profiles-g-l/i3lock-fancy
View file

@ -15,7 +15,7 @@ profile i3lock-fancy @{exec_path} {
include <abstractions/fontconfig-cache-read>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/rm rix,
@{bin}/fc-match rix,

2
apparmor.d/profiles-g-l/ifup
View file

@ -18,7 +18,7 @@ profile ifup @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/ip rix,
@{bin}/route rix,
@{bin}/seq rix,

2
apparmor.d/profiles-g-l/im-launch
View file

@ -12,7 +12,7 @@ profile im-launch @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/dpkg-query rpx,
@{bin}/env rix,
@{bin}/gettext{,.sh} rix,

2
apparmor.d/profiles-g-l/initd-kexec
View file

@ -12,7 +12,7 @@ profile initd-kexec @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/cat rix,
@{bin}/readlink rix,

2
apparmor.d/profiles-g-l/initd-kexec-load
View file

@ -12,7 +12,7 @@ profile initd-kexec-load @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/cat rix,

2
apparmor.d/profiles-g-l/initd-kmod
View file

@ -12,7 +12,7 @@ profile initd-kmod @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/readlink rix,
@{bin}/tput rix,

2
apparmor.d/profiles-g-l/install-info
View file

@ -15,7 +15,7 @@ profile install-info @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/gzip rix,
/usr/share/info/{,**} r,

2
apparmor.d/profiles-g-l/install-printerdriver
View file

@ -15,7 +15,7 @@ profile install-printerdriver @{exec_path} flags=(complain) {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/python3.@{int} r,
/usr/share/system-config-printer/{,**} r,

2
apparmor.d/profiles-g-l/inxi
View file

@ -24,7 +24,7 @@ profile inxi @{exec_path} {
@{bin}/perl r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/zsh rix,
@{bin}/tty rix,
@{bin}/tput rix,

1
apparmor.d/profiles-g-l/ip
View file

@ -29,6 +29,7 @@ profile ip @{exec_path} flags=(attach_disconnected) {
umount /sys/,
@{exec_path} mrix,
@{shells_path} rix,
/ r,

2
apparmor.d/profiles-g-l/jdownloader
View file

@ -105,7 +105,7 @@ profile jdownloader @{exec_path} {
@{bin}/xdg-open mr,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-g-l/jgmenu
View file

@ -20,7 +20,7 @@ profile jgmenu @{exec_path} {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/zsh rix,
@{bin}/mkdir rix,
@{bin}/find rix,

2
apparmor.d/profiles-g-l/kanyremote
View file

@ -28,7 +28,7 @@ profile kanyremote @{exec_path} {
network inet6 stream,
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/ r,
@{bin}/rm rix,

2
apparmor.d/profiles-g-l/kernel-install
View file

@ -14,7 +14,7 @@ profile kernel-install @{exec_path} {
include <abstractions/nameservice-strict>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/mountpoint rix,
@{bin}/sort rix,

2
apparmor.d/profiles-g-l/kmod
View file

@ -25,7 +25,7 @@ profile kmod @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/basename rix,
@{bin}/false rix,
@{bin}/id rix,

2
apparmor.d/profiles-g-l/kodi
View file

@ -24,7 +24,7 @@ profile kodi @{exec_path} {
@{lib}/@{multiarch}/kodi/kodi.bin mrix,
@{lib}/@{multiarch}/kodi/kodi-xrandr rPx,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/basename rix,
@{bin}/cat rix,
@{bin}/cut rix,

2
apparmor.d/profiles-g-l/kvm-ok
View file

@ -12,7 +12,7 @@ profile kvm-ok @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/uname rix,
@{bin}/{,e}grep rix,

2
apparmor.d/profiles-g-l/landscape-sysinfo.wrapper
View file

@ -12,7 +12,7 @@ profile landscape-sysinfo.wrapper @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/bc rix,
@{bin}/cat rix,
@{bin}/cut rix,

2
apparmor.d/profiles-g-l/language-validate
View file

@ -14,7 +14,7 @@ profile language-validate @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/grep rix,
@{bin}/locale rix,

2
apparmor.d/profiles-g-l/lightworks
View file

@ -12,7 +12,7 @@ profile lightworks @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{lib}/lightworks/ntcardvt rPx,

2
apparmor.d/profiles-g-l/linssid
View file

@ -29,7 +29,7 @@ profile linssid @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/cat rix,
# When linssid is run as root, it wants to exec dbus-launch, and hence it creates the two

2
apparmor.d/profiles-g-l/linux-check-removal
View file

@ -32,7 +32,7 @@ profile linux-check-removal @{exec_path} flags=(complain) {
@{bin}/linux-check-removal rPx,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/stty rix,
@{bin}/locale rix,

2
apparmor.d/profiles-g-l/localepurge
View file

@ -14,7 +14,7 @@ profile localepurge @{exec_path} {
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/basename rix,
@{bin}/chmod rix,

2
apparmor.d/profiles-g-l/logrotate
View file

@ -28,7 +28,7 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
@{bin}/ r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/cat rix,
@{bin}/grep rix,
@{bin}/gzip rix,

2
apparmor.d/profiles-g-l/lsinitramfs
View file

@ -12,7 +12,7 @@ profile lsinitramfs @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/cat rix,
@{bin}/getopt rix,

2
apparmor.d/profiles-g-l/lynx
View file

@ -28,7 +28,7 @@ profile lynx @{exec_path} {
/etc/mime.types r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
/etc/mailcap r,
owner /tmp/lynxXXXX*/ rw,