felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add multiple profiles

Browse source
This commit is contained in:
valoq 2024-05-30 12:30:17 +02:00
parent adccd0066a
commit 492ee703af
No known key found for this signature in database
GPG key ID: 19F09A0FB865CBD8
5 changed files with 97 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

52
apparmor.d/profiles-a-f/atool Normal file
View file

@ -0,0 +1,52 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/atool
profile atool /{,usr/}{,s}bin/atool {
include <abstractions/base>
include <abstractions/user-write>
@{exec_path} mr,
@{bin}/7z rix,
@{bin}/arc rix,
@{bin}/arj rix,
@{bin}/bzip2 rix,
@{bin}/bzip2 rix,
@{bin}/bzip rix,
@{bin}/compress rix,
@{bin}/cpio rix,
@{bin}/gunzip rix,
@{bin}/gzip rix,
@{bin}/gzip rix,
@{bin}/jar rix,
@{bin}/lha rix,
@{bin}/lrunzip rix,
@{bin}/lrzcat rix,
@{bin}/lrzip rix,
@{bin}/lrz rix,
@{bin}/lrztar rix,
@{bin}/lrzuntar rix,
@{bin}/lzip rix,
@{bin}/lzma rix,
@{bin}/lzop rix,
@{bin}/lzop rix,
@{bin}/rar rix,
@{bin}/tar rix,
@{bin}/unace rix,
@{bin}/unrar rix,
@{bin}/unxz rix,
@{bin}/unzip rix,
@{bin}/xz rix,
@{bin}/zip rix,
/usr/share/perl5/{,**} r,
include if exists <local/atool>
}

20
apparmor.d/profiles-a-f/exiftool Normal file
View file

@ -0,0 +1,20 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/vendor_perl/exiftool
profile exiftool @{exec_path} {
include <abstractions/base>
include <abstractions/user-read>
@{exec_path} mr,
/usr/share/perl5/{,**} r,
include if exists <local/exiftool>
}

23
apparmor.d/profiles-g-l/highlight Normal file
View file

@ -0,0 +1,23 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/
profile highlight /{,usr/}{,s}bin/highlight {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/user-read>
/etc/machine-id r,
/etc/highlight/{,**} r,
/usr/share/highlight/{,**} r,
@{exec_path} mr,
include if exists <local/highlight>
}

5
apparmor.d/profiles-m-r/mediainfo
View file

@ -10,12 +10,9 @@ include <tunables/global>
@{exec_path} = @{bin}/mediainfo
profile mediainfo @{exec_path} {
include <abstractions/base>
include <abstractions/user-download-strict>
include <abstractions/user-read>
@{exec_path} mr,
owner @{user_music_dirs}/** r,
owner @{user_videos_dirs}/** r,
include if exists <local/mediainfo>
}

4
apparmor.d/profiles-m-r/mediainfo-gui
View file

@ -15,14 +15,12 @@ profile mediainfo-gui @{exec_path} {
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/gtk>
include <abstractions/user-download-strict>
include <abstractions/user-read>
@{exec_path} mr,
@{bin}/xdg-open rCx -> open,
owner @{user_music_dirs}/** r,
owner @{user_videos_dirs}/** r,
profile open {
include <abstractions/base>