feat(groups/{u,v,w,x}*): vim syntax support
Add vim modeline instructing the editor to use syntax plugin provided by apparmor. Continuation of #395 to keep the diff list relatively short.
This commit is contained in:
parent
f1a0349978
commit
68d1222029
126 changed files with 348 additions and 96 deletions
|
|
@ -44,4 +44,6 @@ profile anondate @{exec_path} {
|
|||
owner @{run}/sdwdate/* rw,
|
||||
|
||||
include if exists <local/anondate>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -43,4 +43,6 @@ profile msgcollector @{exec_path} {
|
|||
}
|
||||
|
||||
include if exists <local/msgcollector>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -14,4 +14,6 @@ profile msgcollector-br-add @{exec_path} {
|
|||
@{exec_path} mr,
|
||||
|
||||
include if exists <local/msgcollector-br-add>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -19,4 +19,6 @@ profile msgcollector-generic-gui-message @{exec_path} {
|
|||
@{lib}/msgcollector/ r,
|
||||
|
||||
include if exists <local/msgcollector-generic-gui-message>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -16,4 +16,6 @@ profile msgcollector-striphtml @{exec_path} {
|
|||
@{lib}/msgcollector/ r,
|
||||
|
||||
include if exists <local/msgcollector-striphtml>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -48,4 +48,6 @@ profile msgdispatcher @{exec_path} {
|
|||
}
|
||||
|
||||
include if exists <local/msgdispatcher>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -21,4 +21,6 @@ profile msgdispatcher-autostart @{exec_path} {
|
|||
/dev/tty rw,
|
||||
|
||||
include if exists <local/msgdispatcher-autostart>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -21,4 +21,6 @@ profile msgdispatcher-delete @{exec_path} {
|
|||
@{run}/msgcollector/user/* rw,
|
||||
|
||||
include if exists <local/msgdispatcher-delete>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -16,4 +16,6 @@ profile msgdispatcher-dispatch @{exec_path} {
|
|||
@{exec_path} mr,
|
||||
|
||||
include if exists <local/msgdispatcher-dispatch>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -25,4 +25,6 @@ profile open-link-confirmation @{exec_path} {
|
|||
owner @{HOME}/.xsession-errors rw,
|
||||
|
||||
include if exists <local/open-link-confirmation>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -20,4 +20,6 @@ profile pam-abort-on-locked-password @{exec_path} {
|
|||
owner /dev/tty rw,
|
||||
|
||||
include if exists <local/pam-abort-on-locked-password>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -27,4 +27,6 @@ profile pam-info @{exec_path} {
|
|||
owner /dev/tty rw,
|
||||
|
||||
include if exists <local/pam-info>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -17,4 +17,6 @@ profile pam_faillock_not_if_x @{exec_path} {
|
|||
@{sh_path} rix,
|
||||
|
||||
include if exists <local/pam_faillock_not_if_x>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -60,4 +60,6 @@ profile rads @{exec_path} {
|
|||
}
|
||||
|
||||
include if exists <local/rads>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -53,4 +53,6 @@ profile sdwdate @{exec_path} flags=(attach_disconnected) {
|
|||
/dev/tty rw,
|
||||
|
||||
include if exists <local/sdwdate>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -26,4 +26,6 @@ profile sdwdate-clock-jump @{exec_path} {
|
|||
}
|
||||
|
||||
include if exists <local/sdwdate-clock-jump>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -50,4 +50,6 @@ profile sdwdate-gui @{exec_path} {
|
|||
}
|
||||
|
||||
include if exists <local/sdwdate-gui>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -30,4 +30,6 @@ profile sdwdate-start @{exec_path} {
|
|||
/dev/tty rw,
|
||||
|
||||
include if exists <local/sdwdate-start>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -16,4 +16,6 @@ profile sdwdate-wrapper @{exec_path} {
|
|||
@{lib}/sdwdate/sdwdate rPx,
|
||||
|
||||
include if exists <local/sdwdate-wrapper>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -27,4 +27,6 @@ profile sensible-browser @{exec_path} {
|
|||
owner @{HOME}/.xsession-errors rw,
|
||||
|
||||
include if exists <local/sensible-browser>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -31,4 +31,6 @@ profile systemcheck-canary @{exec_path} {
|
|||
@{PROC}/cmdline r,
|
||||
|
||||
include if exists <local/systemcheck-canary>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -21,4 +21,6 @@ profile timesanitycheck @{exec_path} {
|
|||
owner /dev/tty rw,
|
||||
|
||||
include if exists <local/timesanitycheck>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -20,4 +20,6 @@ profile tor-bootstrap-check @{exec_path} {
|
|||
@{run}/tor/control.authcookie r,
|
||||
|
||||
include if exists <local/tor-bootstrap-check>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -22,4 +22,6 @@ profile tor-consensus-valid-after @{exec_path} {
|
|||
owner /tmp/tmp.@{rand10} rw,
|
||||
|
||||
include if exists <local/tor-consensus-valid-after>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -69,3 +69,5 @@ profile torbrowser @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
include if exists <local/torbrowser>
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -28,4 +28,6 @@ profile torbrowser-glxtest @{exec_path} {
|
|||
owner @{PROC}/@{pid}/cmdline r,
|
||||
|
||||
include if exists <local/torbrowser-glxtest>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -23,3 +23,5 @@ profile torbrowser-plugin-container @{exec_path} {
|
|||
|
||||
include if exists <local/torbrowser-plugin-container>
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -47,3 +47,5 @@ profile torbrowser-start @{exec_path} {
|
|||
|
||||
include if exists <local/torbrowser-start>
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -25,4 +25,6 @@ profile torbrowser-updater @{exec_path} {
|
|||
deny owner @{lib_dirs}/Downloads/** rw,
|
||||
|
||||
include if exists <local/torbrowser-updater>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -39,4 +39,6 @@ profile torbrowser-updater-permission-fix @{exec_path} {
|
|||
deny @{HOME}/ r,
|
||||
|
||||
include if exists <local/torbrowser-updater-permission-fix>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -28,4 +28,6 @@ profile torbrowser-vaapitest @{exec_path} {
|
|||
deny @{user_cache_dirs}/startupCache/* r,
|
||||
|
||||
include if exists <local/torbrowser-vaapitest>
|
||||
}
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -75,3 +75,5 @@ profile torbrowser-wrapper @{exec_path} {
|
|||
|
||||
include if exists <local/torbrowser-wrapper>
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -21,3 +21,5 @@ profile whonix-firewall-edit @{exec_path} {
|
|||
include if exists <local/whonix-firewall-edit>
|
||||
}
|
||||
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -43,3 +43,5 @@ profile whonix-firewall-restarter @{exec_path} {
|
|||
include if exists <local/whonix-firewall-restarter>
|
||||
}
|
||||
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -47,3 +47,5 @@ profile whonix-firewall @{exec_path} {
|
|||
|
||||
include if exists <local/whonix-firewall>
|
||||
}
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue