felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Unbreak Debian 11 and partially Ubuntu 22.04 (Wayland+GDM+Gnome) (#81)

Browse source 
* Unbreaking Debian 11 and partially Ubuntu 22.04

* pre-cleanup

* pre-cleanup2

* Update im-launch

* Update gnome-extension-ding

* polishing

* not yet

* Update ubuntu.flags

Allow GDM to boot. `No new privs` fix.

* Update debian.flags

Allow GDM to boot. `No new privs` fix.

* Update CONTRIBUTING.md

* fixes

* reverting w

* move setpriv to main.flags
This commit is contained in:
nobodysu 2022-10-14 21:21:56 +00:00 • committed by GitHub
parent bdcaa040fe
commit 643a84997e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
110 changed files with 3157 additions and 182 deletions
Download patch file Download diff file Expand all files Collapse all files

35
apparmor.d/groups/gnome/gdm-xsession
View file

@ -23,16 +23,35 @@ profile gdm-xsession @{exec_path} {
/{usr/,}bin/id rix,
/{usr/,}bin/tty rix,
/{usr/,}bin/zsh rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/locale rix,
/{usr/,}bin/gettext rix,
/{usr/,}bin/gettext.sh r,
/{usr/,}bin/{m,g,}awk rix,
/{usr/,}bin/truncate rix,
/{usr/,}bin/mktemp rix,
/{usr/,}bin/expr rix,
/{usr/,}bin/locale-check rix,
/{usr/,}bin/dbus-update-activation-environment rCx -> dbus,
/{usr/,}bin/flatpak rPUx,
/{usr/,}bin/systemctl rPx -> child-systemctl,
/{usr/,}bin/xbrlapi rPx,
/{usr/,}bin/xhost rPx,
/{usr/,}bin/im-launch rPx,
/{usr/,}bin/gpgconf rPx,
@{libexec}/gnome-session-binary rPx,
/{usr/,}bin/dpkg-query rpx,
/etc/X11/{,**} r,
/etc/default/im-config r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/etc/X11/{,**} r,
/usr/share/im-config/data/{,*} r,
/usr/share/im-config/xinputrc.common r,
owner /tmp/gdm{3,}-config-err-?????? rw,
# file_inherit
/dev/tty[0-9]* rw,
@ -42,10 +61,24 @@ profile gdm-xsession @{exec_path} {
/{usr/,}bin/dbus-update-activation-environment mr,
owner @{run}/user/@{uid}/bus rw,
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={Hello,UpdateActivationEnvironment}
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=session path=/org/freedesktop/systemd[0-9]*
interface=org.freedesktop.systemd[0-9]*.Manager
member=SetEnvironment
peer=(name=org.freedesktop.systemd[0-9]*),
# file_inherit
/dev/tty rw,
/dev/tty[0-9]* rw,
owner @{HOME}/.xsession-errors w,
include if exists <local/gdm-xsession_dbus>
}
include if exists <local/gdm-xsession>