felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Profile update after tests on Arch.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-02 10:18:29 +01:00
parent e4266d9cda
commit 604b184c9d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 121 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/abstractions/devices-usb
View file

@ -10,6 +10,7 @@
/dev/bus/usb/[0-9]*/[0-9]* rw,
@{sys}/class/ r,
@{sys}/class/usbmisc/ r,
@{sys}/bus/ r,
@{sys}/bus/usb/ r,
@ -21,3 +22,4 @@
@{run}/udev/data/+usb:* r,
@{run}/udev/data/c16[6,7]* r,
@{run}/udev/data/c18[0,8,9]* r,
@{run}/udev/data/c8[0-9]:[0-9]* r,

4
apparmor.d/abstractions/disks-read
View file

@ -15,6 +15,9 @@
@{sys}/devices/pci[0-9]*/**/block/sd[a-z]/** r,
@{sys}/devices/pci[0-9]*/**/{usb,ata}[0-9]/** r,
# SSD Nvme devices
@{sys}/devices/pci[0-9]*/**/nvme/nvme[0-9]*/{,**} r,
# SD card devices
/dev/mmcblk[0-9]* rk,
/dev/mmcblk[0-9]*p[0-9]* rk,
@ -68,6 +71,7 @@
@{run}/udev/data/b242:[0-9]* r, # for dynamic kernel assignment of block devices
@{run}/udev/data/b241:[0-9]* r, # for dynamic kernel assignment of block devices
@{run}/udev/data/b240:[0-9]* r, # for dynamic kernel assignment of block devices
@{run}/udev/data/b259:[0-9]* r,
@{run}/udev/data/b179:[0-9]* r, # for /dev/mmcblk*
@{run}/udev/data/b11:[0-9]* r, # for /dev/sr*

5
apparmor.d/abstractions/disks-write
View file

@ -15,6 +15,10 @@
@{sys}/devices/pci[0-9]*/**/block/sd[a-z]/** r,
@{sys}/devices/pci[0-9]*/**/{usb,ata}[0-9]/** r,
# SSD Nvme devices
/dev/nvme[0-9]* rwk,
@{sys}/devices/pci[0-9]*/**/nvme/nvme[0-9]*/{,**} r,
# SD card devices
/dev/mmcblk[0-9]* rwk,
/dev/mmcblk[0-9]*p[0-9]* rwk,
@ -68,6 +72,7 @@
@{run}/udev/data/b242:[0-9]* r, # for dynamic kernel assignment of block devices
@{run}/udev/data/b241:[0-9]* r, # for dynamic kernel assignment of block devices
@{run}/udev/data/b240:[0-9]* r, # for dynamic kernel assignment of block devices
@{run}/udev/data/b259:[0-9]* r,
@{run}/udev/data/b179:[0-9]* r, # for /dev/mmcblk*
@{run}/udev/data/b11:[0-9]* r, # for /dev/sr*

2
apparmor.d/abstractions/gtk
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2017-2021 Mikhail Morfikov
# 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -29,6 +30,7 @@
owner @{user_config_dirs}/gtk-3.0/settings.ini r,
owner @{user_config_dirs}/gtk-3.0/bookmarks r,
owner @{user_config_dirs}/gtk-3.0/gtk.css r,
owner @{user_config_dirs}/gtk-3.0/colors.css r,
# for gtk file dialog
owner @{user_config_dirs}/gtk-2.0/ rw,