felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-05-15 22:56:42 +01:00
parent 0b66933b45
commit 5c382d7eb3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
33 changed files with 115 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/gnome-control-center
View file

@ -105,7 +105,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/virtual/dmi/id/chassis_type r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]/hwmon[0-9]/temp* r,
owner @{sys}/fs/cgroup/user.slice/user-[0-9]*.slice/user@[0-9]*.service/{,**} rw,
owner @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/{,**} rw,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/cmdline r,

1
apparmor.d/groups/gnome/gnome-system-monitor
View file

@ -43,6 +43,7 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/pci[0-9]*/**/net/*/statistics/collisions r,
@{sys}/devices/pci[0-9]*/**/net/*/statistics/rx_{bytes,errors,packets} r,
@{sys}/devices/pci[0-9]*/**/net/*/statistics/tx_{bytes,errors,packets} r,
@{sys}/devices/pci[0-9]*/**/virtio[0-9]*/**/stat r,
@{sys}/devices/virtual/net/*/statistics/collisions r,
@{sys}/devices/virtual/net/*/statistics/rx_{bytes,errors,packets} r,
@{sys}/devices/virtual/net/*/statistics/tx_{bytes,errors,packets} r,

8
apparmor.d/groups/gnome/gnome-tweaks
View file

@ -12,6 +12,7 @@ profile gnome-tweaks @{exec_path} {
include <abstractions/audio>
include <abstractions/dconf>
include <abstractions/gnome>
include <abstractions/gtk>
include <abstractions/python>
@{exec_path} mr,
@ -20,7 +21,7 @@ profile gnome-tweaks @{exec_path} {
/{usr/,}bin/ps rPx,
/{usr/,}bin/python3.[0-9]* rix,
/{usr/,}lib/python3.[0-9]*/site-packages/gtweak/{*/,**/}__pycache__/*pyc* w,
/{usr/,}lib/python3.[0-9]*/site-packages/gtweak/{,*/,**/}__pycache__/*pyc* w,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/gnome-tweaks/{,**} r,
@ -28,7 +29,8 @@ profile gnome-tweaks @{exec_path} {
/etc/xdg/autostart/{,**} r,
owner @{user_cache_dirs}/thumbnails/{,**} r,
owner @{user_config_dirs}/autostart/{,*.desktop} r,
owner @{user_config_dirs}/autostart/ rw,
owner @{user_config_dirs}/autostart/*.desktop r,
owner @{user_share_dirs}/backgrounds/{,**} r,
owner @{user_share_dirs}/gnome-shell/extensions/**/schemas/* r,
owner @{user_share_dirs}/gvfs-metadata/{,*} r,
@ -38,5 +40,7 @@ profile gnome-tweaks @{exec_path} {
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{PROC}/@{pid}/fd/ r,
include if exists <local/gnome-tweaks>
}

2
apparmor.d/groups/gnome/gsd-print-notifications
View file

@ -22,6 +22,8 @@ profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
/etc/machine-id r,
@{run}/cups/cups.sock rw,
owner @{PROC}/@{pid}/fd/ r,
owner /dev/tty[0-9]* rw,

1
apparmor.d/groups/gnome/nautilus
View file

@ -22,6 +22,7 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
/usr/share/nautilus/{,**} r,
/usr/share/poppler/{,**} r,
/usr/share/sounds/freedesktop/stereo/*.oga r,
/usr/share/thumbnailers/{,**} r,
/usr/share/tracker3/{,**} r,
owner @{user_share_dirs}/nautilus/{,**} rwk,