felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update pipewire profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-29 23:53:47 +02:00
parent 32a9806219
commit 60b9127916
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 14 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/freedesktop/pipewire-pulse
View file

@ -11,15 +11,18 @@ include <tunables/global>
profile pipewire-pulse @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/nameservice-strict>
capability sys_ptrace,
ptrace (read),
ptrace read,
@{exec_path} mr,
@{bin}/pactl rix,
@{bin}/pipewire mr,
/usr/share/pipewire/{,**} r,
@ -38,6 +41,9 @@ profile pipewire-pulse @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/virtual/dmi/id/sys_vendor r,
@{sys}/devices/virtual/dmi/id/board_vendor r,
@{sys}/devices/virtual/dmi/id/bios_vendor r,
@{sys}/module/apparmor/parameters/enabled r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
include if exists <local/pipewire-pulse>
}

4
apparmor.d/groups/freedesktop/wireplumber
View file

@ -75,6 +75,10 @@ profile wireplumber @{exec_path} {
@{sys}/devices/virtual/dmi/id/product_name r,
@{sys}/devices/virtual/dmi/id/sys_vendor r,
@{PROC}/1/cgroup r,
@{PROC}/1/cmdline r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
/dev/media@{int} rw,