felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add the input abs.

Browse source
This commit is contained in:
Alexandre Pujol 2025-09-13 00:43:40 +02:00
parent 34cc1ab131
commit 51bcdd5e14
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 28 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/abstractions/common/app
View file

@ -26,6 +26,7 @@
include <abstractions/fontconfig-cache-write> include <abstractions/fontconfig-cache-write>
include <abstractions/graphics> include <abstractions/graphics>
include <abstractions/gstreamer> include <abstractions/gstreamer>
include <abstractions/input>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/p11-kit> include <abstractions/p11-kit>
include <abstractions/path> include <abstractions/path>
@ -72,8 +73,6 @@
@{run}/pcscd/pcscd.comm rw, # Allow access to pcscd socket. @{run}/pcscd/pcscd.comm rw, # Allow access to pcscd socket.
@{run}/utmp rk, @{run}/utmp rk,
@{run}/udev/data/c13:@{int} r, # for /dev/input/*
@{sys}/ r, @{sys}/ r,
@{sys}/block/ r, @{sys}/block/ r,
@{sys}/bus/ r, @{sys}/bus/ r,
@ -143,8 +142,6 @@
owner @{att}/dev/shm/@{uuid} r, owner @{att}/dev/shm/@{uuid} r,
/dev/hidraw@{int} rw, /dev/hidraw@{int} rw,
/dev/input/ r,
/dev/input/event@{int} rw,
/dev/ptmx rw, /dev/ptmx rw,
/dev/pts/ptmx rw, /dev/pts/ptmx rw,
/dev/tty rw, /dev/tty rw,

5
apparmor.d/abstractions/common/game
View file

@ -17,6 +17,7 @@
include <abstractions/devices-usb> include <abstractions/devices-usb>
include <abstractions/fontconfig-cache-write> include <abstractions/fontconfig-cache-write>
include <abstractions/graphics> include <abstractions/graphics>
include <abstractions/input>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
@ -108,11 +109,7 @@
/dev/ r, /dev/ r,
/dev/hidraw@{int} rw, /dev/hidraw@{int} rw,
/dev/input/ r,
/dev/input/event@{int} rw,
/dev/input/js@{int} rw,
/dev/tty rw, /dev/tty rw,
/dev/uinput rw,
include if exists <abstractions/common/game.d> include if exists <abstractions/common/game.d>

26
apparmor.d/abstractions/input Normal file
View file

@ -0,0 +1,26 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021 Canonical Ltd
# Copyright (C) 2022-2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# Allow reading and writing to raw input devices
abi <abi/4.0>,
# network netlink raw,
# Allow reading for supported event reports for all input devices. See
# https://www.kernel.org/doc/Documentation/input/event-codes.txt
@{sys}/devices/**/input@{int}/capabilities/* r,
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad
@{run}/udev/data/c13:@{int} r, # for /dev/input/*
/dev/input/ r,
/dev/input/event@{int} rw,
/dev/input/mice rw,
/dev/input/mouse@{int} rw,
include if exists <abstractions/input.d>
# vim:syntax=apparmor