felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): better integration with openSUSE.

Browse source 
See #134
This commit is contained in:
Alexandre Pujol 2023-03-27 22:22:36 +01:00
parent 4ca3ced1a5
commit 41766ebd2a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 82 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -18,11 +18,11 @@ profile pulseaudio @{exec_path} {
include <abstractions/dconf-write>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/gstreamer>
include <abstractions/hosts_access>
include <abstractions/nameservice-strict>
include <abstractions/X-strict>
include <abstractions/freedesktop.org>
ptrace (trace) peer=@{profile_name},
@ -140,12 +140,13 @@ profile pulseaudio @{exec_path} {
owner /var/lib/lightdm/.config/pulse/{,**} rw,
owner /var/lib/lightdm/.config/pulse/cookie k,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/ rw,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/registry.*.bin{,.tmp*} rw,
owner @{user_config_dirs}/ w,
owner @{user_config_dirs}/pulse/{,**} rw,
owner @{user_cache_dirs}/gstreamer-1.0/registry.*.bin r,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/ rw,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/registry.*.bin{,.tmp*} rw,
owner @{run}/user/@{uid}/ rw,
owner @{run}/user/@{uid}/pulse/{,*} rw,
@ -167,6 +168,9 @@ profile pulseaudio @{exec_path} {
owner @{PROC}/@{pids}/stat r,
owner @{PROC}/@{pids}/cmdline r,
/dev/media[0-9]* r,
/dev/video[0-9]* rw,
# file_inherit
owner /dev/tty[0-9]* rw,
owner @{HOME}/.xsession-errors w,