felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use @{uid} instead of [0-9]* when it denotes the user id.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-18 19:00:15 +01:00
parent cd4ad5b09c
commit 4a35b7d804
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
137 changed files with 253 additions and 253 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/gvfs/gvfs-udisks2-volume-monitor
View file

@ -29,8 +29,8 @@ profile gvfs-udisks2-volume-monitor @{exec_path} {
/{usr/,}bin/umount rPx,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ w,
owner @{run}/user/[0-9]*/dconf/user rw,
owner @{run}/user/@{uid}/dconf/ w,
owner @{run}/user/@{uid}/dconf/user rw,
/etc/fstab r,

2
apparmor.d/groups/gvfs/gvfsd
View file

@ -21,7 +21,7 @@ profile gvfsd @{exec_path} {
/usr/share/gvfs/{,**} r,
owner @{run}/user/[0-9]*/gvfs/ rw,
owner @{run}/user/@{uid}/gvfs/ rw,
owner @{PROC}/@{pid}/fd/ r,

8
apparmor.d/groups/gvfs/gvfsd-dav
View file

@ -28,11 +28,11 @@ profile gvfsd-dav @{exec_path} {
/usr/share/mime/mime.cache r,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/[0-9]*/gvfsd/ rw,
owner @{run}/user/[0-9]*/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{run}/user/@{uid}/gvfsd/ rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
include if exists <local/gvfsd-dav>
}

4
apparmor.d/groups/gvfs/gvfsd-dnssd
View file

@ -14,8 +14,8 @@ profile gvfsd-dnssd @{exec_path} {
@{exec_path} mr,
owner @{run}/user/[0-9]*/gvfsd/ rw,
owner @{run}/user/[0-9]*/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{run}/user/@{uid}/gvfsd/ rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
include if exists <local/gvfsd-dnssd>
}

4
apparmor.d/groups/gvfs/gvfsd-ftp
View file

@ -22,8 +22,8 @@ profile gvfsd-ftp @{exec_path} {
@{exec_path} mr,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

6
apparmor.d/groups/gvfs/gvfsd-fuse
View file

@ -16,7 +16,7 @@ profile gvfsd-fuse @{exec_path} {
/{usr/,}bin/fusermount{,3} rCx -> fusermount,
mount fstype={fuse,fuse.*} -> @{run}/user/[0-9]*/gvfs/,
mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/gvfs/,
/dev/fuse rw,
@ -33,8 +33,8 @@ profile gvfsd-fuse @{exec_path} {
/{usr/,}bin/fusermount{,3} mr,
mount fstype={fuse,fuse.*} -> @{run}/user/[0-9]*/gvfs/,
umount @{run}/user/[0-9]*/**/,
mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/gvfs/,
umount @{run}/user/@{uid}/**/,
/etc/fuse.conf r,

4
apparmor.d/groups/gvfs/gvfsd-mtp
View file

@ -19,8 +19,8 @@ profile gvfsd-mtp @{exec_path} {
@{exec_path} mr,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

8
apparmor.d/groups/gvfs/gvfsd-network
View file

@ -14,14 +14,14 @@ profile gvfsd-network @{exec_path} {
@{exec_path} mr,
owner @{run}/user/[0-9]*/gvfsd/ rw,
owner @{run}/user/[0-9]*/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{run}/user/@{uid}/gvfsd/ rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
include if exists <local/gvfsd-network>
}

4
apparmor.d/groups/gvfs/gvfsd-recent
View file

@ -27,8 +27,8 @@ profile gvfsd-recent @{exec_path} {
owner @{user_share_dirs}/gvfs-metadata/{,*} r,
owner @{user_share_dirs}/recently-used.xbel r,
owner @{run}/user/[0-9]*/gvfsd/ rw,
owner @{run}/user/[0-9]*/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{run}/user/@{uid}/gvfsd/ rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{PROC}/@{pid}/mountinfo r,
@{PROC}/sys/kernel/random/boot_id r,

4
apparmor.d/groups/gvfs/gvfsd-smb
View file

@ -21,8 +21,8 @@ profile gvfsd-smb @{exec_path} {
@{exec_path} mr,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

4
apparmor.d/groups/gvfs/gvfsd-smb-browse
View file

@ -21,8 +21,8 @@ profile gvfsd-smb-browse @{exec_path} {
@{exec_path} mr,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

4
apparmor.d/groups/gvfs/gvfsd-trash
View file

@ -26,8 +26,8 @@ profile gvfsd-trash @{exec_path} {
@{run}/mount/utab r,
owner @{run}/user/[0-9]*/gvfsd/ rw,
owner @{run}/user/[0-9]*/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{run}/user/@{uid}/gvfsd/ rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
# Can restore all user files
owner @{HOME}/{,**} rw,