Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables
* 'tunables' of https://github.com/nobody43/apparmor.d: dbus temp tails Update apparmor.d Update gdm-runtime-config more unrelated changes adjust date-time random tails rename to int, convert more profiles fixes tunables
This commit is contained in:
parent
7b018a60bd
commit
557d905543
198 changed files with 560 additions and 507 deletions
|
|
@ -49,17 +49,19 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
|
|||
@{bin}/passwd rPx,
|
||||
@{bin}/userdel rPx,
|
||||
@{bin}/usermod rPx,
|
||||
@{bin}/locale rPUx,
|
||||
|
||||
/usr/share/language-tools/language-validate rPx,
|
||||
/usr/share/language-tools/set-language-helper rPUx,
|
||||
/usr/share/language-tools/save-to-pam-env rPUx,
|
||||
|
||||
/usr/share/accountsservice/{,**} r,
|
||||
/usr/share/dbus-1/interfaces/*.xml r,
|
||||
|
||||
/etc/default/locale r,
|
||||
/etc/gdm{3,}/ r,
|
||||
/etc/gdm{3,}/custom.conf{,.??????} rw,
|
||||
/etc/gdm{3,}/daemon.conf{,.??????} rw,
|
||||
/etc/gdm{3,}/custom.conf{,.@{rand6}} rw,
|
||||
/etc/gdm{3,}/daemon.conf{,.@{rand6}} rw,
|
||||
/etc/machine-id r,
|
||||
/etc/shadow r,
|
||||
/etc/shells r,
|
||||
|
|
@ -68,7 +70,8 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
|
|||
owner /var/lib/AccountsService/ r,
|
||||
owner /var/lib/AccountsService/** rw,
|
||||
|
||||
@{HOME}/ r,
|
||||
@{HOME}/ r,
|
||||
owner @{HOME}/.pam_environment r,
|
||||
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
owner @{PROC}/@{pid}/loginuid rw,
|
||||
|
|
@ -81,7 +84,7 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
|
|||
# wtmp.d ?
|
||||
/var/log/wtmp r,
|
||||
|
||||
owner /tmp/gnome-control-center-user-icon-?????? rw,
|
||||
owner /tmp/gnome-control-center-user-icon-@{rand6} rw,
|
||||
|
||||
include if exists <local/accounts-daemon>
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue