felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refractor(abs): common/apt -> apt.

Browse source
This commit is contained in:
Alexandre Pujol 2025-09-14 15:34:04 +02:00
parent d9ff4aecd7
commit 4609595c26
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
43 changed files with 46 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/abstractions/common/apt → apparmor.d/abstractions/apt
View file

@ -35,6 +35,6 @@
owner @{tmp}/#@{int} rw, owner @{tmp}/#@{int} rw,
owner @{tmp}/clearsigned.message.* rw, owner @{tmp}/clearsigned.message.* rw,
include if exists <abstractions/common/apt.d> include if exists <abstractions/apt.d>
# vim:syntax=apparmor # vim:syntax=apparmor

2
apparmor.d/groups/apt/apt
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt @{bin}/apt-get @{sbin}/aptd @{exec_path} = @{bin}/apt @{bin}/apt-get @{sbin}/aptd
profile apt @{exec_path} flags=(attach_disconnected) { profile apt @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.login1> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/org.freedesktop.PolicyKit1> include <abstractions/bus/org.freedesktop.PolicyKit1>

2
apparmor.d/groups/apt/apt-cache
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-cache @{exec_path} = @{bin}/apt-cache
profile apt-cache @{exec_path} { profile apt-cache @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/apt/apt-cdrom
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-cdrom @{exec_path} = @{bin}/apt-cdrom
profile apt-cdrom @{exec_path} flags=(complain) { profile apt-cdrom @{exec_path} flags=(complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
capability dac_read_search, capability dac_read_search,

2
apparmor.d/groups/apt/apt-config
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-config @{exec_path} = @{bin}/apt-config
profile apt-config @{exec_path} { profile apt-config @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/apt/apt-extracttemplates
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-extracttemplates @{lib}/apt/apt-extracttemplates @{exec_path} = @{bin}/apt-extracttemplates @{lib}/apt/apt-extracttemplates
profile apt-extracttemplates @{exec_path} { profile apt-extracttemplates @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/common/apt>
capability dac_read_search, capability dac_read_search,

2
apparmor.d/groups/apt/apt-file
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-file @{exec_path} = @{bin}/apt-file
profile apt-file @{exec_path} { profile apt-file @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/perl> include <abstractions/perl>
@{exec_path} r, @{exec_path} r,

2
apparmor.d/groups/apt/apt-forktracer
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-forktracer @{exec_path} = @{bin}/apt-forktracer
profile apt-forktracer @{exec_path} { profile apt-forktracer @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/python> include <abstractions/python>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/apt/apt-helper
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/apt/apt-helper @{exec_path} = @{lib}/apt/apt-helper
profile apt-helper @{exec_path} { profile apt-helper @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/apt/apt-mark
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-mark @{exec_path} = @{bin}/apt-mark
profile apt-mark @{exec_path} { profile apt-mark @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/apt/apt-show-versions
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-show-versions @{exec_path} = @{bin}/apt-show-versions
profile apt-show-versions @{exec_path} { profile apt-show-versions @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/perl> include <abstractions/perl>

2
apparmor.d/groups/apt/aptitude
View file

@ -10,9 +10,9 @@ include <tunables/global>
@{exec_path} = @{bin}/aptitude{,-curses} @{exec_path} = @{bin}/aptitude{,-curses}
profile aptitude @{exec_path} flags=(complain) { profile aptitude @{exec_path} flags=(complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/common/apt>
# To remove the following errors: # To remove the following errors:
# W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory # W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory

2
apparmor.d/groups/apt/command-not-found
View file

@ -12,7 +12,7 @@ include <tunables/global>
@{exec_path} += @{lib}/command-not-found @{exec_path} += @{lib}/command-not-found
profile command-not-found @{exec_path} { profile command-not-found @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/apt/debtags
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{bin}/debtags @{exec_path} = @{bin}/debtags
profile debtags @{exec_path} { profile debtags @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/common/apt>
include <abstractions/python> include <abstractions/python>
#capability sys_tty_config, #capability sys_tty_config,

2
apparmor.d/groups/apt/dpkg-checkbuilddeps
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{bin}/dpkg-checkbuilddeps @{exec_path} = @{bin}/dpkg-checkbuilddeps
profile dpkg-checkbuilddeps @{exec_path} flags=(complain) { profile dpkg-checkbuilddeps @{exec_path} flags=(complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/perl> include <abstractions/perl>
include <abstractions/common/apt>
@{exec_path} r, @{exec_path} r,

2
apparmor.d/groups/apt/dpkg-db-backup
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/dpkg/dpkg-db-backup @{exec_path} = @{lib}/dpkg/dpkg-db-backup
profile dpkg-db-backup @{exec_path} { profile dpkg-db-backup @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/apt/dpkg-maintscript-helper
View file

@ -21,8 +21,8 @@ profile dpkg-maintscript-helper @{exec_path} {
profile dpkg { profile dpkg {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/common/apt>
capability dac_read_search, capability dac_read_search,

6
apparmor.d/groups/apt/querybts
View file

@ -10,14 +10,14 @@ include <tunables/global>
@{exec_path} = @{bin}/querybts @{exec_path} = @{bin}/querybts
profile querybts @{exec_path} { profile querybts @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/gtk> include <abstractions/apt>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>
include <abstractions/freedesktop.org> include <abstractions/freedesktop.org>
include <abstractions/gtk>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/common/apt>
network inet dgram, network inet dgram,
network inet6 dgram, network inet6 dgram,

2
apparmor.d/groups/apt/reportbug
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/reportbug @{exec_path} = @{bin}/reportbug
profile reportbug @{exec_path} { profile reportbug @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/desktop> include <abstractions/desktop>

2
apparmor.d/groups/apt/synaptic
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/synaptic @{bin}/synaptic-pkexec @{exec_path} = @{bin}/synaptic @{bin}/synaptic-pkexec
profile synaptic @{exec_path} { profile synaptic @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/desktop> include <abstractions/desktop>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/apt/unattended-upgrade
View file

@ -10,11 +10,11 @@ include <tunables/global>
@{exec_path} = @{bin}/unattended-upgrade @{exec_path} = @{bin}/unattended-upgrade
profile unattended-upgrade @{exec_path} flags=(attach_disconnected) { profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.login1> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/org.freedesktop.NetworkManager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.PackageKit> include <abstractions/bus/org.freedesktop.PackageKit>
include <abstractions/common/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/perl> include <abstractions/perl>

2
apparmor.d/groups/apt/unattended-upgrade-shutdown
View file

@ -9,10 +9,10 @@ include <tunables/global>
@{exec_path} = /usr/share/unattended-upgrades/unattended-upgrade-shutdown @{exec_path} = /usr/share/unattended-upgrades/unattended-upgrade-shutdown
profile unattended-upgrade-shutdown @{exec_path} flags=(attach_disconnected) { profile unattended-upgrade-shutdown @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.login1> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/org.freedesktop.NetworkManager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/common/apt>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/apt/update-apt-xapian-index
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{bin}/update-apt-xapian-index @{exec_path} = @{bin}/update-apt-xapian-index
profile update-apt-xapian-index @{exec_path} { profile update-apt-xapian-index @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/common/apt>
include <abstractions/python> include <abstractions/python>
@{exec_path} r, @{exec_path} r,

2
apparmor.d/groups/grub/grub-sort-version
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/grub/grub-sort-version @{exec_path} = @{lib}/grub/grub-sort-version
profile grub-sort-version @{exec_path} { profile grub-sort-version @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/kde/kded
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/kded5 @{bin}/kded6 @{exec_path} = @{bin}/kded5 @{bin}/kded6
profile kded @{exec_path} { profile kded @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt> #aa:only apt
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
@ -18,7 +19,6 @@ profile kded @{exec_path} {
include <abstractions/bus/org.freedesktop.ModemManager1> include <abstractions/bus/org.freedesktop.ModemManager1>
include <abstractions/bus/org.freedesktop.PolicyKit1> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/bus/org.freedesktop.UDisks2> include <abstractions/bus/org.freedesktop.UDisks2>
include <abstractions/common/apt> #aa:only apt
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/devices-usb> include <abstractions/devices-usb>

2
apparmor.d/groups/ubuntu/apport
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = /usr/share/apport/apport @{exec_path} = /usr/share/apport/apport
profile apport @{exec_path} flags=(attach_disconnected) { profile apport @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/ubuntu/apport-gtk
View file

@ -9,12 +9,12 @@ include <tunables/global>
@{exec_path} = /usr/share/apport/apport-gtk @{exec_path} = /usr/share/apport/apport-gtk
profile apport-gtk @{exec_path} { profile apport-gtk @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/common/apt>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/gnome-strict> include <abstractions/gnome-strict>
include <abstractions/gschemas> include <abstractions/gschemas>

2
apparmor.d/groups/ubuntu/apt-esm-hook
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/ubuntu-advantage/apt-esm-hook @{exec_path} = @{lib}/ubuntu-advantage/apt-esm-hook
profile apt-esm-hook @{exec_path} { profile apt-esm-hook @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/ubuntu/apt-esm-json-hook
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/ubuntu-advantage/apt-esm-json-hook @{exec_path} = @{lib}/ubuntu-advantage/apt-esm-json-hook
profile apt-esm-json-hook @{exec_path} { profile apt-esm-json-hook @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
unix (receive, send) type=stream peer=(label=apt), unix (receive, send) type=stream peer=(label=apt),

2
apparmor.d/groups/ubuntu/apt_news
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/ubuntu-advantage/apt_news.py @{exec_path} = @{lib}/ubuntu-advantage/apt_news.py
profile apt_news @{exec_path} flags=(attach_disconnected) { profile apt_news @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/ubuntu/check-new-release-gtk
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/ubuntu-release-upgrader/check-new-release-gtk @{exec_path} = @{lib}/ubuntu-release-upgrader/check-new-release-gtk
profile check-new-release-gtk @{exec_path} { profile check-new-release-gtk @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>

2
apparmor.d/groups/ubuntu/do-release-upgrade
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/do-release-upgrade @{exec_path} = @{bin}/do-release-upgrade
profile do-release-upgrade @{exec_path} { profile do-release-upgrade @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/ubuntu/hwe-support-status
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/hwe-support-status @{exec_path} = @{bin}/hwe-support-status
profile hwe-support-status @{exec_path} { profile hwe-support-status @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/python> include <abstractions/python>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/ubuntu/list-oem-metapackages
View file

@ -9,8 +9,8 @@ include <tunables/global>
@{exec_path} = @{lib}/update-notifier/list-oem-metapackages @{exec_path} = @{lib}/update-notifier/list-oem-metapackages
profile list-oem-metapackages @{exec_path} { profile list-oem-metapackages @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/python> include <abstractions/python>
include <abstractions/common/apt>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/ubuntu/package-data-downloader
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/update-notifier/package-data-downloader @{exec_path} = @{lib}/update-notifier/package-data-downloader
profile package-data-downloader @{exec_path} { profile package-data-downloader @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/ubuntu/software-properties-dbus
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/software-properties/software-properties-dbus @{exec_path} = @{lib}/software-properties/software-properties-dbus
profile software-properties-dbus @{exec_path} { profile software-properties-dbus @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/ubuntu/software-properties-gtk
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/software-properties-gtk @{exec_path} = @{bin}/software-properties-gtk
profile software-properties-gtk @{exec_path} flags=(attach_disconnected) { profile software-properties-gtk @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
@ -16,7 +17,6 @@ profile software-properties-gtk @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>
include <abstractions/bus/org.freedesktop.portal.Desktop> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/common/apt>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/gnome-strict> include <abstractions/gnome-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/ubuntu/ubuntu-advantage
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/ubuntu-advantage @{exec_path} = @{bin}/ubuntu-advantage
profile ubuntu-advantage @{exec_path} { profile ubuntu-advantage @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/ubuntu/update-manager
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/update-manager @{exec_path} = @{bin}/update-manager
profile update-manager @{exec_path} flags=(attach_disconnected) { profile update-manager @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
@ -18,7 +19,6 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.freedesktop.NetworkManager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.portal.Desktop> include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/common/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/gnome-strict> include <abstractions/gnome-strict>

2
apparmor.d/groups/ubuntu/update-motd-updates-available
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/update-notifier/update-motd-updates-available @{exec_path} = @{lib}/update-notifier/update-motd-updates-available
profile update-motd-updates-available @{exec_path} { profile update-motd-updates-available @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/ubuntu/update-notifier
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/update-notifier @{exec_path} = @{bin}/update-notifier
profile update-notifier @{exec_path} { profile update-notifier @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
@ -16,7 +17,6 @@ profile update-notifier @{exec_path} {
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/bus/org.kde.StatusNotifierWatcher> include <abstractions/bus/org.kde.StatusNotifierWatcher>
include <abstractions/common/apt>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/gnome-strict> include <abstractions/gnome-strict>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/profiles-m-r/packagekitd
View file

@ -9,11 +9,11 @@ include <tunables/global>
@{exec_path} = @{lib}/packagekitd @{exec_path} = @{lib}/packagekitd
profile packagekitd @{exec_path} flags=(attach_disconnected) { profile packagekitd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt> #aa:only apt
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.login1> include <abstractions/bus/org.freedesktop.login1>
include <abstractions/bus/org.freedesktop.NetworkManager> include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.freedesktop.PolicyKit1> include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/common/apt> #aa:only apt
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>

4
apparmor.d/profiles-m-r/pycompile
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/py{,3}compile @{bin}/py{,3}clean @{exec_path} = @{bin}/py{,3}compile @{bin}/py{,3}clean
profile pycompile @{exec_path} flags=(attach_disconnected,complain) { profile pycompile @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/apt> include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/python> include <abstractions/python>
@ -32,8 +32,8 @@ profile pycompile @{exec_path} flags=(attach_disconnected,complain) {
profile dpkg { profile dpkg {
include <abstractions/base> include <abstractions/base>
include <abstractions/apt>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/common/apt>
capability dac_read_search, capability dac_read_search,