felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): ensure attached/consoles is not used manually.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-05 15:00:08 +02:00
parent c2b9f21d85
commit 5fb5d03512
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
46 changed files with 46 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/bus/at-spi2-registryd
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,at-spi2{,-core}/}at-spi2-registryd @{exec_path} = @{lib}/{,at-spi2{,-core}/}at-spi2-registryd
profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) { profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>

2
apparmor.d/groups/bus/dbus-accessibility
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,at-spi2{,-core}/}at-spi-bus-launcher @{exec_path} = @{lib}/{,at-spi2{,-core}/}at-spi-bus-launcher
profile dbus-accessibility @{exec_path} flags=(attach_disconnected) { profile dbus-accessibility @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>

2
apparmor.d/groups/bus/dbus-system
View file

@ -16,7 +16,7 @@ include <tunables/global>
profile dbus-system flags=(attach_disconnected) { profile dbus-system flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/deny-sensitive-home> include <abstractions/deny-sensitive-home>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/bus/ibus-engine-simple
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,ibus/}ibus-engine-simple @{exec_path} = @{lib}/{,ibus/}ibus-engine-simple
profile ibus-engine-simple @{exec_path} flags=(attach_disconnected) { profile ibus-engine-simple @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/ibus> include <abstractions/ibus>

2
apparmor.d/groups/bus/ibus-x11
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,ibus/}ibus-x11 @{exec_path} = @{lib}/{,ibus/}ibus-x11
profile ibus-x11 @{exec_path} flags=(attach_disconnected) { profile ibus-x11 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>

2
apparmor.d/groups/children/child-modprobe-nvidia
View file

@ -19,7 +19,7 @@ include <tunables/global>
@{exec_path} = @{bin}/nvidia-modprobe @{exec_path} = @{bin}/nvidia-modprobe
profile child-modprobe-nvidia flags=(attach_disconnected) { profile child-modprobe-nvidia flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/consoles> include <abstractions/consoles>
capability chown, capability chown,

2
apparmor.d/groups/firewall/ufw
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/ufw @{exec_path} = @{bin}/ufw
profile ufw @{exec_path} flags=(attach_disconnected) { profile ufw @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>

2
apparmor.d/groups/freedesktop/dconf-service
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,dconf/}dconf-service @{exec_path} = @{lib}/{,dconf/}dconf-service
profile dconf-service @{exec_path} flags=(attach_disconnected) { profile dconf-service @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/freedesktop/geoclue
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/geoclue @{lib}/geoclue-2.0/demos/agent @{exec_path} = @{lib}/geoclue @{lib}/geoclue-2.0/demos/agent
profile geoclue @{exec_path} flags=(attach_disconnected) { profile geoclue @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/fi.w1.wpa_supplicant1> include <abstractions/bus/fi.w1.wpa_supplicant1>
include <abstractions/bus/org.freedesktop.Avahi> include <abstractions/bus/org.freedesktop.Avahi>

2
apparmor.d/groups/freedesktop/update-desktop-database
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/update-desktop-database @{exec_path} = @{bin}/update-desktop-database
profile update-desktop-database @{exec_path} flags=(attach_disconnected) { profile update-desktop-database @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/freedesktop.org> include <abstractions/freedesktop.org>

2
apparmor.d/groups/freedesktop/xdg-dbus-proxy
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/xdg-dbus-proxy @{exec_path} = @{bin}/xdg-dbus-proxy
profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) { profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>

2
apparmor.d/groups/freedesktop/xdg-desktop-portal
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) { profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app-open> include <abstractions/app-open>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-desktop-portal-gnome @{exec_path} = @{lib}/xdg-desktop-portal-gnome
profile xdg-desktop-portal-gnome @{exec_path} flags=(attach_disconnected) { profile xdg-desktop-portal-gnome @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-desktop-portal-gtk @{exec_path} = @{lib}/xdg-desktop-portal-gtk
profile xdg-desktop-portal-gtk @{exec_path} flags=(attach_disconnected) { profile xdg-desktop-portal-gtk @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>

2
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-document-portal @{exec_path} = @{lib}/xdg-document-portal
profile xdg-document-portal @{exec_path} flags=(attach_disconnected) { profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore> include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
include <abstractions/deny-sensitive-home> include <abstractions/deny-sensitive-home>

2
apparmor.d/groups/freedesktop/xdg-permission-store
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/xdg-permission-store @{exec_path} = @{lib}/xdg-permission-store
profile xdg-permission-store @{exec_path} flags=(attach_disconnected) { profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/freedesktop/xkbcomp
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/xkbcomp @{exec_path} = @{bin}/xkbcomp
profile xkbcomp @{exec_path} flags=(attach_disconnected) { profile xkbcomp @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/mesa> include <abstractions/mesa>
include <abstractions/X-strict> include <abstractions/X-strict>

2
apparmor.d/groups/gnome/gjs-console
View file

@ -14,7 +14,7 @@ include <tunables/global>
@{exec_path} = @{bin}/gjs-console @{exec_path} = @{bin}/gjs-console
profile gjs-console @{exec_path} flags=(attach_disconnected) { profile gjs-console @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.portal.Desktop> include <abstractions/bus/org.freedesktop.portal.Desktop>

2
apparmor.d/groups/gnome/gnome-keyring-daemon
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/gnome-keyring-daemon @{exec_path} = @{bin}/gnome-keyring-daemon
profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) { profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.login1.Session> include <abstractions/bus/org.freedesktop.login1.Session>

2
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -102,7 +102,7 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
profile open flags=(attach_disconnected) { profile open flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/desktop> include <abstractions/desktop>

2
apparmor.d/groups/gnome/gsd-a11y-settings
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-a11y-settings @{exec_path} = @{lib}/gsd-a11y-settings
profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) { profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gsd-color
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-color @{exec_path} = @{lib}/gsd-color
profile gsd-color @{exec_path} flags=(attach_disconnected) { profile gsd-color @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>

2
apparmor.d/groups/gnome/gsd-datetime
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-datetime @{exec_path} = @{lib}/gsd-datetime
profile gsd-datetime @{exec_path} flags=(attach_disconnected) { profile gsd-datetime @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gsd-housekeeping
View file

@ -10,7 +10,7 @@ include <tunables/global>
profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) { profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app-launcher-user> include <abstractions/app-launcher-user>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>

2
apparmor.d/groups/gnome/gsd-keyboard
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-keyboard @{exec_path} = @{lib}/gsd-keyboard
profile gsd-keyboard @{exec_path} flags=(attach_disconnected) { profile gsd-keyboard @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>

2
apparmor.d/groups/gnome/gsd-media-keys
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-media-keys @{exec_path} = @{lib}/gsd-media-keys
profile gsd-media-keys @{exec_path} flags=(attach_disconnected) { profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>

2
apparmor.d/groups/gnome/gsd-power
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-power @{exec_path} = @{lib}/gsd-power
profile gsd-power @{exec_path} flags=(attach_disconnected) { profile gsd-power @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>

2
apparmor.d/groups/gnome/gsd-print-notifications
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-print-notifications @{exec_path} = @{lib}/gsd-print-notifications
profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) { profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.Avahi> include <abstractions/bus/org.freedesktop.Avahi>

2
apparmor.d/groups/gnome/gsd-printer
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-printer @{exec_path} = @{lib}/gsd-printer
profile gsd-printer @{exec_path} flags=(attach_disconnected) { profile gsd-printer @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>

2
apparmor.d/groups/gnome/gsd-rfkill
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-rfkill @{exec_path} = @{lib}/gsd-rfkill
profile gsd-rfkill @{exec_path} flags=(attach_disconnected) { profile gsd-rfkill @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.hostname1> include <abstractions/bus/org.freedesktop.hostname1>

2
apparmor.d/groups/gnome/gsd-screensaver-proxy
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-screensaver-proxy @{exec_path} = @{lib}/gsd-screensaver-proxy
profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) { profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>

2
apparmor.d/groups/gnome/gsd-sharing
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-sharing @{exec_path} = @{lib}/gsd-sharing
profile gsd-sharing @{exec_path} flags=(attach_disconnected) { profile gsd-sharing @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.NetworkManager> include <abstractions/bus/org.freedesktop.NetworkManager>

2
apparmor.d/groups/gnome/gsd-smartcard
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-smartcard @{exec_path} = @{lib}/gsd-smartcard
profile gsd-smartcard @{exec_path} flags=(attach_disconnected) { profile gsd-smartcard @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/groups/gnome/gsd-sound
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-sound @{exec_path} = @{lib}/gsd-sound
profile gsd-sound @{exec_path} flags=(attach_disconnected) { profile gsd-sound @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager> include <abstractions/bus/org.gnome.SessionManager>

2
apparmor.d/groups/gnome/gsd-wacom
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/gsd-wacom @{exec_path} = @{lib}/gsd-wacom
profile gsd-wacom @{exec_path} flags=(attach_disconnected) { profile gsd-wacom @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>

2
apparmor.d/groups/gnome/mutter-x11-frames
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/mutter-x11-frames @{exec_path} = @{lib}/mutter-x11-frames
profile mutter-x11-frames @{exec_path} flags=(attach_disconnected) { profile mutter-x11-frames @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>

2
apparmor.d/profiles-g-l/gsettings
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/gsettings @{exec_path} = @{bin}/gsettings
profile gsettings @{exec_path} flags=(attach_disconnected) { profile gsettings @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/dconf-write> include <abstractions/dconf-write>

2
apparmor.d/profiles-g-l/linuxqq
View file

@ -14,7 +14,7 @@ include <tunables/global>
@{exec_path} = @{bin}/linuxqq @{lib_dirs}/qq @{exec_path} = @{bin}/linuxqq @{lib_dirs}/qq
profile linuxqq @{exec_path} flags=(attach_disconnected) { profile linuxqq @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/electron> include <abstractions/common/electron>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>

2
apparmor.d/profiles-s-z/spice-vdagent
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/spice-vdagent @{exec_path} = @{bin}/spice-vdagent
profile spice-vdagent @{exec_path} flags=(attach_disconnected) { profile spice-vdagent @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/audio-server> include <abstractions/audio-server>
include <abstractions/bus-accessibility> include <abstractions/bus-accessibility>

2
apparmor.d/profiles-s-z/v2ray
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/v2ray @{exec_path} = @{bin}/v2ray
profile v2ray @{exec_path} flags=(attach_disconnected) { profile v2ray @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
network inet dgram, network inet dgram,
network inet stream, network inet stream,

2
apparmor.d/profiles-s-z/wechat
View file

@ -14,7 +14,7 @@ include <tunables/global>
@{exec_path} = @{lib_dirs}/wechat @{exec_path} = @{lib_dirs}/wechat
profile wechat @{exec_path} flags=(attach_disconnected) { profile wechat @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/electron> include <abstractions/common/electron>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>

2
apparmor.d/profiles-s-z/wechat-appimage
View file

@ -14,7 +14,7 @@ include <tunables/global>
@{exec_path} = @{bin}/wechat @{lib_dirs}/wechat-appimage.Appimage /tmp/.mount_wechat??????/user/bin/wechat @{exec_path} = @{bin}/wechat @{lib_dirs}/wechat-appimage.Appimage /tmp/.mount_wechat??????/user/bin/wechat
profile wechat-appimage @{exec_path} flags=(attach_disconnected) { profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/electron> include <abstractions/common/electron>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>

2
apparmor.d/profiles-s-z/wechat-universal
View file

@ -14,7 +14,7 @@ include <tunables/global>
@{exec_path} = @{bin}/wechat-universal @{lib_dirs}/wechat @{exec_path} = @{bin}/wechat-universal @{lib_dirs}/wechat
profile wechat-universal @{exec_path} flags=(attach_disconnected) { profile wechat-universal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/electron> include <abstractions/common/electron>
include <abstractions/common/bwrap> include <abstractions/common/bwrap>

2
apparmor.d/profiles-s-z/wemeet
View file

@ -11,7 +11,7 @@ include <tunables/global>
@{exec_path} += /opt/wemeet/bin/QtWebEngineProcess @{exec_path} += /opt/wemeet/bin/QtWebEngineProcess
profile wemeet @{exec_path} flags=(attach_disconnected) { profile wemeet @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/bwrap> include <abstractions/common/bwrap>
include <abstractions/common/chromium> include <abstractions/common/chromium>

2
apparmor.d/profiles-s-z/xbrlapi
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/xbrlapi @{exec_path} = @{bin}/xbrlapi
profile xbrlapi @{exec_path} flags=(attach_disconnected) { profile xbrlapi @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
network inet stream, network inet stream,
network inet6 stream, network inet6 stream,

2
apparmor.d/profiles-s-z/xray
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/xray @{exec_path} = @{bin}/xray
profile xray @{exec_path} flags=(attach_disconnected) { profile xray @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/consoles>
network inet dgram, network inet dgram,
network inet stream, network inet stream,