felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update some ui profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-16 23:53:14 +01:00
parent f993db64b9
commit 4797026e28
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 21 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-s-z/terminator
View file

@ -23,6 +23,8 @@ profile terminator @{exec_path} flags=(attach_disconnected) {
ptrace, ptrace,
signal send set=hup peer=unconfined,
#aa:dbus own bus=session name=net.tenshu.Terminator@{hex} #aa:dbus own bus=session name=net.tenshu.Terminator@{hex}
@{exec_path} mr, @{exec_path} mr,

12
apparmor.d/profiles-s-z/transmission
View file

@ -9,6 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/transmission-{gtk,qt} @{exec_path} = @{bin}/transmission-{gtk,qt}
profile transmission @{exec_path} { profile transmission @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-accessibility>
include <abstractions/bus-session>
include <abstractions/bus/org.a11y>
include <abstractions/bus/org.freedesktop.Notifications>
include <abstractions/bus/org.kde.StatusNotifierWatcher>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/desktop> include <abstractions/desktop>
include <abstractions/graphics> include <abstractions/graphics>
@ -23,12 +28,18 @@ profile transmission @{exec_path} {
network inet6 stream, network inet6 stream,
network netlink raw, network netlink raw,
#aa:dbus own bus=session name=com.transmissionbt.Transmission
#aa:dbus own bus=session name=com.transmissionbt.transmission_*
#aa:dbus talk bus=session name=org.gtk.vfs label="gvfsd{,-*}"
@{exec_path} mr, @{exec_path} mr,
@{open_path} rPx -> child-open, @{open_path} rPx -> child-open,
/usr/share/transmission/{,**} r, /usr/share/transmission/{,**} r,
owner @{HOME}/ r,
owner @{user_torrents_dirs}/ r, owner @{user_torrents_dirs}/ r,
owner @{user_torrents_dirs}/** rw, owner @{user_torrents_dirs}/** rw,
@ -48,6 +59,7 @@ profile transmission @{exec_path} {
owner @{PROC}/@{pid}/comm r, owner @{PROC}/@{pid}/comm r,
owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r, owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
deny @{user_share_dirs}/gvfs-metadata/* r, deny @{user_share_dirs}/gvfs-metadata/* r,

7
apparmor.d/profiles-s-z/vlc
View file

@ -75,6 +75,13 @@ profile vlc @{exec_path} {
@{run}/mount/utab r, @{run}/mount/utab r,
@{sys}/devices/virtual/dmi/id/board_name r,
@{sys}/devices/virtual/dmi/id/board_vendor r,
@{sys}/devices/virtual/dmi/id/board_version r,
@{sys}/devices/virtual/dmi/id/product_name r,
@{sys}/devices/virtual/dmi/id/product_version r,
@{sys}/devices/virtual/dmi/id/sys_vendor r,
/dev/shm/#@{int} rw, /dev/shm/#@{int} rw,
/dev/snd/ r, /dev/snd/ r,
/dev/tty r, /dev/tty r,