felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): add the dconf-write abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-09 21:55:55 +01:00
parent 583d7a15f0
commit 5d45b8e7a7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
104 changed files with 124 additions and 371 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/ubuntu/check-new-release-gtk
View file

@ -11,7 +11,7 @@ profile check-new-release-gtk @{exec_path} {
include <abstractions/base>
include <abstractions/apt-common>
include <abstractions/dbus-session-strict>
include <abstractions/dconf>
include <abstractions/dconf-write>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/python>
@ -41,7 +41,6 @@ profile check-new-release-gtk @{exec_path} {
owner @{user_cache_dirs}/update-manager-core/{,**} rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/@{uid}/wayland-[0-9] rw,
owner @{PROC}/@{pid}/fd/ r,

4
apparmor.d/groups/ubuntu/livepatch-notification
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}lib/update-notifier/livepatch-notification
profile livepatch-notification @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>
include <abstractions/dconf-write>
include <abstractions/gtk>
@{exec_path} mr,
@ -20,8 +20,6 @@ profile livepatch-notification @{exec_path} {
owner @{run}/user/@{uid}/at-spi/bus rw,
owner @{run}/user/@{uid}/bus rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/@{uid}/wayland-[0-9]* rw,
include if exists <local/livepatch-notification>

4
apparmor.d/groups/ubuntu/ubuntu-advantage-notification
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile ubuntu-advantage-notification @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-session>
include <abstractions/dconf>
include <abstractions/dconf-write>
include <abstractions/gtk>
@{exec_path} mr,
@ -20,8 +20,6 @@ profile ubuntu-advantage-notification @{exec_path} {
/usr/share/X11/xkb/{,**} r,
owner @{run}/user/@{uid}/at-spi/bus rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/@{uid}/wayland-[0-9]* rw,
include if exists <local/ubuntu-advantage-notification>

4
apparmor.d/groups/ubuntu/update-notifier
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile update-notifier @{exec_path} {
include <abstractions/base>
include <abstractions/apt-common>
include <abstractions/dconf>
include <abstractions/dconf-write>
include <abstractions/fonts>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
@ -58,8 +58,6 @@ profile update-notifier @{exec_path} {
owner @{run}/user/@{uid}/at-spi/bus rw,
owner @{run}/user/@{uid}/bus rw,
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/@{uid}/update-notifier.pid rwk,
owner @{run}/user/@{uid}/wayland-[0-9]* rw,