felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: tweak kde related abs to ensure all common rules are allowed.

Browse source 
fix #741
This commit is contained in:
Alexandre Pujol 2025-05-25 14:48:54 +02:00
parent facc504ae9
commit 58d677b5f0
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/abstractions/app/open
View file

@ -34,9 +34,13 @@
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>
include <abstractions/graphics> include <abstractions/graphics>
/etc/xdg/menus/ r,
owner @{run}/user//@{uid}/#@{int} rw, owner @{run}/user//@{uid}/#@{int} rw,
owner @{run}/user/@{uid}/kioclient@{rand6}.@{int}.kioworker.socket rwl -> @{run}/user/@{uid}/#@{int}, owner @{run}/user/@{uid}/kioclient@{rand6}.@{int}.kioworker.socket rwl -> @{run}/user/@{uid}/#@{int},
@{PROC}/sys/kernel/random/boot_id r,
# fi # fi
include if exists <abstractions/app/open.d> include if exists <abstractions/app/open.d>

2
apparmor.d/abstractions/desktop
View file

@ -52,7 +52,7 @@
owner @{user_cache_dirs}/#@{int} rw, owner @{user_cache_dirs}/#@{int} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/ksycoca{5,6}_??{_,-}*.@{rand6} rwlk, owner @{user_cache_dirs}/ksycoca{5,6}_??{_,-}*={.@{rand6}} rwlk,
owner @{user_config_dirs}/baloofilerc r, owner @{user_config_dirs}/baloofilerc r,
owner @{user_config_dirs}/dolphinrc r, owner @{user_config_dirs}/dolphinrc r,

4
apparmor.d/abstractions/kde-strict
View file

@ -28,7 +28,7 @@
owner @{user_cache_dirs}/#@{int} rw, owner @{user_cache_dirs}/#@{int} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/ksycoca{5,6}_??{_,-}*.@{rand6} rwlk, owner @{user_cache_dirs}/ksycoca{5,6}_??{_,-}*={.@{rand6}} rwlk,
owner @{user_config_dirs}/baloofilerc r, owner @{user_config_dirs}/baloofilerc r,
owner @{user_config_dirs}/dolphinrc r, owner @{user_config_dirs}/dolphinrc r,
@ -41,6 +41,8 @@
owner @{user_config_dirs}/kwinrc r, owner @{user_config_dirs}/kwinrc r,
owner @{user_config_dirs}/trashrc r, owner @{user_config_dirs}/trashrc r,
owner @{user_share_dirs}/#@{int} rw,
include if exists <abstractions/kde-strict.d> include if exists <abstractions/kde-strict.d>
# vim:syntax=apparmor # vim:syntax=apparmor