felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): add gnome-extension-gsconnect

Browse source
This commit is contained in:
Alexandre Pujol 2023-08-27 14:57:50 +01:00
parent 75ef5ef6ad
commit 4d79af2203
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 86 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/groups/gnome/gjs-console
View file

@ -2,11 +2,15 @@
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# TODO: GNOME JavaScript interpreter. It's used to run extensions. Therefore,
# by default, some extension are confined under this profile. The resulting profile
# is quite broard. The architecture of this needs to be rethinked.
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/gjs-console
@{exec_path} = @{bin}/gjs-console
profile gjs-console @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-session-strict>
@ -78,6 +82,9 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
@{bin}/[a-z0-9]* rPUx,
@{lib}/** rPUx,
/usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io/{service/daemon.js,gsconnect-preferences} rPx,
@{user_share_dirs}/gnome-shell/extensions/gsconnect@andyholmes.github.io/{service/daemon.js,gsconnect-preferences} rPx,
/etc/openni2/OpenNI.ini r,
/usr/share/dconf/profile/gdm r,