felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

@{HOME}/.local/share -> @{user_share_dirs}

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-01 17:23:34 +01:00
parent 7f6ea8d44d
commit 54ac285b7d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
53 changed files with 141 additions and 141 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/apps/android-studio
View file

@ -157,14 +157,14 @@ profile android-studio @{exec_path} {
owner @{HOME}/.android/ rw,
owner @{HOME}/.android/** rwkl -> @{HOME}/.android/**,
owner @{HOME}/.local/share/Google/ rw,
owner @{HOME}/.local/share/Google/** rw,
owner @{user_share_dirs}/Google/ rw,
owner @{user_share_dirs}/Google/** rw,
owner @{HOME}/.local/share/kotlin/ rw,
owner @{HOME}/.local/share/kotlin/** rw,
owner @{user_share_dirs}/kotlin/ rw,
owner @{user_share_dirs}/kotlin/** rw,
owner "@{HOME}/.local/share/Android Open Source Project/" rw,
owner "@{HOME}/.local/share/Android Open Source Project/**" rwk,
owner "@{user_share_dirs}/Android Open Source Project/" rw,
owner "@{user_share_dirs}/Android Open Source Project/**" rwk,
owner @{HOME}/.java/ rw,
owner @{HOME}/.java/fonts/ rw,

6
apparmor.d/groups/apps/calibre
View file

@ -89,9 +89,9 @@ profile calibre @{exec_path} {
owner @{user_config_dirs}/calibre/ rw,
owner @{user_config_dirs}/calibre/** rwk,
owner @{HOME}/.local/share/calibre-ebook.com/ rw,
owner @{HOME}/.local/share/calibre-ebook.com/calibre/ rw,
owner @{HOME}/.local/share/calibre-ebook.com/calibre/** rwk,
owner @{user_share_dirs}/calibre-ebook.com/ rw,
owner @{user_share_dirs}/calibre-ebook.com/calibre/ rw,
owner @{user_share_dirs}/calibre-ebook.com/calibre/** rwk,
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/calibre/ rw,

2
apparmor.d/groups/apps/freetube
View file

@ -89,7 +89,7 @@ profile freetube @{exec_path} {
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{HOME}/.local/share r,
owner @{user_share_dirs} r,
deny @{sys}/devices/virtual/tty/tty0/active r,
deny @{sys}/devices/system/cpu/cpufreq/policy[0-9]/cpuinfo_max_freq r,

2
apparmor.d/groups/apps/okular
View file

@ -52,7 +52,7 @@ profile okular @{exec_path} {
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwalletrc r,
owner @{HOME}/.local/share/okular/{,**} rw,
owner @{user_share_dirs}/okular/{,**} rw,
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,

10
apparmor.d/groups/apps/usr.lib.libreoffice.program.soffice.bin
View file

@ -211,7 +211,7 @@ profile libreoffice-soffice /usr/lib/libreoffice/program/soffice.bin flags=(comp
# firefox >= 58
owner @{HOME}/.mozilla/firefox/*/cert9.db r,
owner @{HOME}/.local/share/user-places.xbel r,
owner @{user_share_dirs}/user-places.xbel r,
# there is abstractions/gnupg but that's just for gpg1...
profile gpg flags=(complain) {
@ -259,10 +259,10 @@ profile libreoffice-soffice /usr/lib/libreoffice/program/soffice.bin flags=(comp
owner @{user_cache_dirs}/qt_compose_cache_{little,big}_endian_* r,
# TODO: use recent-documents-write abstraction when it is available
owner @{HOME}/.local/share/RecentDocuments/** r,
owner @{HOME}/.local/share/RecentDocuments/*.desktop rwl -> @{HOME}/.local/share/RecentDocuments/#[0-9]*,
owner @{HOME}/.local/share/RecentDocuments/#[0-9]* rw,
owner @{HOME}/.local/share/RecentDocuments/*.lock rwk,
owner @{user_share_dirs}/RecentDocuments/** r,
owner @{user_share_dirs}/RecentDocuments/*.desktop rwl -> @{user_share_dirs}/RecentDocuments/#[0-9]*,
owner @{user_share_dirs}/RecentDocuments/#[0-9]* rw,
owner @{user_share_dirs}/RecentDocuments/*.lock rwk,
# TODO: use kde-globals-write abstraction when it is available
owner @{user_config_dirs}/kdeglobals rw,

2
apparmor.d/groups/apps/vlc
View file

@ -100,7 +100,7 @@ profile vlc @{exec_path} {
owner @{HOME}/ r,
owner @{user_config_dirs}/vlc/ rw,
owner @{user_config_dirs}/vlc/* rwkl -> @{user_config_dirs}/vlc/#[0-9]*[0-9],
owner @{HOME}/.local/share/vlc/{,*} rw,
owner @{user_share_dirs}/vlc/{,*} rw,
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/vlc/{,**} rw,

2
apparmor.d/groups/browsers/brave
View file

@ -154,7 +154,7 @@ profile brave @{exec_path} {
/dev/bus/usb/[0-9]*/[0-9]* rw,
# For downloading files
owner @{HOME}/.local/share/.org.chromium.Chromium.* rw,
owner @{user_share_dirs}/.org.chromium.Chromium.* rw,
/var/lib/dbus/machine-id r,
/etc/machine-id r,

2
apparmor.d/groups/browsers/chromium-chromium
View file

@ -88,7 +88,7 @@ profile chromium-chromium @{exec_path} {
owner @{CHROMIUM_HOMEDIR}/** rwk,
owner @{CHROMIUM_HOMEDIR}/WidevineCdm/*/_platform_specific/linux_*/libwidevinecdm.so mrw,
owner @{HOME}/.local/share/.org.chromium.Chromium.* rw,
owner @{user_share_dirs}/.org.chromium.Chromium.* rw,
# Cache files
owner @{user_cache_dirs}/ rw,

4
apparmor.d/groups/browsers/firefox
View file

@ -122,8 +122,8 @@ profile firefox @{exec_path} {
# Set default browser
/{usr/,}bin/update-mime-database rPUx,
owner @{user_config_dirs}/mimeapps.list{,.*} rw,
owner @{HOME}/.local/share/mime/packages/user-extension-{htm,html,xht,xhtml,shtml}.xml rw,
owner @{HOME}/.local/share/mime/packages/user-extension-{htm,html,xht,xhtml,shtml}.xml.* rw,
owner @{user_share_dirs}/mime/packages/user-extension-{htm,html,xht,xhtml,shtml}.xml rw,
owner @{user_share_dirs}/mime/packages/user-extension-{htm,html,xht,xhtml,shtml}.xml.* rw,
# KDE system keyring
/{usr/,}lib/@{multiarch}/qt5/plugins/kf5/org.kde.kwindowsystem.platforms/KF5WindowSystemX11Plugin.so mr,

2
apparmor.d/groups/browsers/google-chrome-chrome
View file

@ -84,7 +84,7 @@ profile google-chrome-chrome @{exec_path} {
# Flashplayer
owner @{CHROME_HOMEDIR}/PepperFlash/**/libpepflashplayer.so mr,
owner @{HOME}/.local/share/.com.google.Chrome.* rw,
owner @{user_share_dirs}/.com.google.Chrome.* rw,
# Cache files
owner @{user_cache_dirs}/ rw,

2
apparmor.d/groups/browsers/opera
View file

@ -75,7 +75,7 @@ profile opera @{exec_path} {
owner @{OPERA_HOMEDIR}/ rw,
owner @{OPERA_HOMEDIR}/** rwk,
owner @{HOME}/.local/share/.org.chromium.Chromium.* rw,
owner @{user_share_dirs}/.org.chromium.Chromium.* rw,
# Cache files
owner @{user_cache_dirs}/ rw,

2
apparmor.d/groups/gnome/gio-launch-desktop
View file

@ -24,7 +24,7 @@ profile gio-launch-desktop @{exec_path} {
# User files
owner @{user_config_dirs}/mimeapps.list r,
owner @{HOME}/.local/share/applications/{,*.desktop} r,
owner @{user_share_dirs}/applications/{,*.desktop} r,
owner @{PROC}/@{pid}/fd/ r,
# file_inherit

4
apparmor.d/groups/gpg/gpg
View file

@ -38,8 +38,8 @@ profile gpg @{exec_path} {
owner /tmp/ostree-gpg-*/** rwkl -> /tmp/ostree-gpg-*/**,
# For ToR Browser
owner @{HOME}/.local/share/torbrowser/gnupg_homedir/ r,
owner @{HOME}/.local/share/torbrowser/gnupg_homedir/** rwkl -> @{HOME}/.local/share/torbrowser/gnupg_homedir/**,
owner @{user_share_dirs}/torbrowser/gnupg_homedir/ r,
owner @{user_share_dirs}/torbrowser/gnupg_homedir/** rwkl -> @{user_share_dirs}/torbrowser/gnupg_homedir/**,
# For spamassassin
owner /var/lib/spamassassin/sa-update-keys/** rwkl -> /var/lib/spamassassin/sa-update-keys/**,

4
apparmor.d/groups/gvfs/gvfsd-metadata
View file

@ -16,8 +16,8 @@ profile gvfsd-metadata @{exec_path} {
@{exec_path} mr,
owner @{HOME}/.local/share/gvfs-metadata/ rw,
owner @{HOME}/.local/share/gvfs-metadata/** rw,
owner @{user_share_dirs}/gvfs-metadata/ rw,
owner @{user_share_dirs}/gvfs-metadata/** rw,
include if exists <local/gvfsd-metadata>
}

2
apparmor.d/groups/gvfs/gvfsd-recent
View file

@ -13,7 +13,7 @@ profile gvfsd-recent @{exec_path} {
@{exec_path} mr,
owner @{HOME}/.local/share/recently-used.xbel r,
owner @{user_share_dirs}/recently-used.xbel r,
include if exists <local/gvfsd-recent>
}