feat(abs): add the sqlite abstraction.

This commit is contained in:
Alexandre Pujol 2025-08-19 21:43:20 +02:00
parent 24f629d326
commit 5e5fde7741
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 41 additions and 37 deletions

View file

@ -17,6 +17,7 @@ profile gnome-music @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict>
include <abstractions/p11-kit>
include <abstractions/python>
include <abstractions/sqlite>
include <abstractions/ssl_certs>
network inet stream,
@ -51,8 +52,6 @@ profile gnome-music @{exec_path} flags=(attach_disconnected) {
@{att}/@{run}/systemd/inhibit/@{int}.ref rw,
owner @{tmp}/grilo-plugin-cache-[0-9A-Z]*/ rw,
owner @{tmp}/etilqs_@{sqlhex} rw,
owner /var/tmp/etilqs_@{sqlhex} rw,
@{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,
owner @{PROC}/@{pid}/mounts r,

View file

@ -23,6 +23,7 @@ profile localsearch @{exec_path} flags=(attach_disconnected) {
include <abstractions/graphics>
include <abstractions/gstreamer>
include <abstractions/nameservice-strict>
include <abstractions/sqlite>
network netlink raw,
@ -56,9 +57,6 @@ profile localsearch @{exec_path} flags=(attach_disconnected) {
owner @{user_cache_dirs}/tracker3/files/ rw,
owner @{user_cache_dirs}/tracker3/files/** rwk,
owner @{tmp}/etilqs_@{sqlhex} rw,
owner /var/tmp/etilqs_@{sqlhex} rw,
@{run}/mount/utab r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511

View file

@ -21,6 +21,7 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/gstreamer>
include <abstractions/nameservice-strict>
include <abstractions/sqlite>
network netlink raw,
@ -63,9 +64,6 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
owner @{gdm_config_dirs}/dconf/user r,
owner @{gdm_share_dirs}/applications/ r,
owner @{tmp}/etilqs_@{sqlhex} rw,
owner /var/tmp/etilqs_@{sqlhex} rw,
# Allow to search user files
owner @{HOME}/{,**} r,
owner @{MOUNTS}/{,**} r,