felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update kde profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-30 14:59:26 +00:00
parent c08f93de50
commit 4672694d39
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
33 changed files with 101 additions and 325 deletions
Download patch file Download diff file Expand all files Collapse all files

35
apparmor.d/groups/kde/kde-powerdevil
View file

@ -9,11 +9,9 @@ include <tunables/global>
@{exec_path} = @{lib}/org_kde_powerdevil
profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted) {
include <abstractions/base>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read>
include <abstractions/qt5>
include <abstractions/X-strict>
include <abstractions/graphics>
include <abstractions/kde-strict>
capability wake_alarm,
@ -21,22 +19,24 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)
@{exec_path} mrix,
@{bin}/kcminit rPx,
@{lib}/drkonqi rPx,
@{bin}/{,ba,da}sh rix,
@{bin}/find rix,
@{bin}/grep rix,
@{bin}/kcminit rPx,
@{bin}/sed rix,
@{bin}/xargs rix,
@{lib}/drkonqi rPx,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/*.notifyrc r,
/etc/fstab r,
/etc/xdg/kdeglobals r,
/etc/machine-id r,
owner @{HOME}/ r,
owner @{user_cache_dirs}/kcrash-metadata/{,*} rw,
owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/powerdevilrc.lock rwk,
owner @{user_config_dirs}/powerdevilrc{,.@{rand6}} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/powermanagementprofilesrc.lock rwk,
@ -46,20 +46,23 @@ profile kde-powerdevil @{exec_path} flags=(attach_disconnected mediate_deleted)
@{run}/udev/data/c189:@{int} r, # for /dev/bus/usb/**
owner @{run}/user/@{uid}kcrash_[0-9]* rw,
@{PROC}/@{pid}/mounts r,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,
@{sys}/bus/ r,
@{sys}/class/ r,
@{sys}/class/drm/ r,
@{sys}/class/i2c-dev/ r,
@{sys}/class/usbmisc/ r,
@{sys}/devices/@{pci}/drm/card@{int}/*/edid r,
@{sys}/devices/@{pci}/drm/card@{int}/*/enabled r,
@{sys}/devices/@{pci}/drm/card@{int}/*/status r,
@{sys}/devices/i2c-[0-9]*/name r,
@{sys}/devices/@{pci}/i2c-[0-9]*/name r,
@{sys}/devices/**/ r,
@{sys}/devices/i2c-[0-9]*/name r,
@{sys}/devices/platform/*/i2c-[0-9]*/name r,
@{PROC}/@{pid}/mounts r,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,
/dev/tty rw,
/dev/rfkill r,