felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): make profile entrypoint more universal.

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-04 23:28:17 +00:00
parent e031c129ed
commit 6e56cfccc9
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
70 changed files with 122 additions and 147 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/freedesktop/accounts-daemon
View file

@ -7,8 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/accountsservice/accounts-daemon
@{exec_path} += @{libexec}/accounts-daemon
@{exec_path} = @{libexec}/{,accountsservice/}accounts-daemon
profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-strict>

3
apparmor.d/groups/freedesktop/at-spi-bus-launcher
View file

@ -7,8 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/at-spi2-core/at-spi-bus-launcher
@{exec_path} += @{libexec}/at-spi-bus-launcher
@{exec_path} = @{libexec}/{,at-spi2{,-core}/}at-spi-bus-launcher
profile at-spi-bus-launcher @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-session>

3
apparmor.d/groups/freedesktop/at-spi2-registryd
View file

@ -7,8 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/at-spi2-core/at-spi2-registryd
@{exec_path} += @{libexec}/at-spi2-registryd
@{exec_path} = @{libexec}/{,at-spi2{,-core}/}at-spi2-registryd
profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-session-strict>

3
apparmor.d/groups/freedesktop/colord-sane
View file

@ -7,8 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/colord/colord-sane
@{exec_path} += @{libexec}/colord-sane
@{exec_path} = @{libexec}/{,colord/}colord-sane
profile colord-sane @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base>
include <abstractions/dbus-strict>

2
apparmor.d/groups/freedesktop/dconf-service
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/dconf/dconf-service @{libexec}/dconf-service
@{exec_path} = @{libexec}/{,dconf/}dconf-service
profile dconf-service @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-session-strict>

3
apparmor.d/groups/freedesktop/polkitd
View file

@ -7,8 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/polkit-1/polkitd
@{exec_path} += @{libexec}/polkitd
@{exec_path} = @{libexec}/{,polkit-1/}polkitd
profile polkitd @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-strict>

3
apparmor.d/groups/freedesktop/upowerd
View file

@ -7,8 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/upower/upowerd
@{exec_path} += @{libexec}/upowerd
@{exec_path} = @{libexec}/{,upower/}upowerd
profile upowerd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-strict>

2
apparmor.d/groups/freedesktop/xorg
View file

@ -8,7 +8,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/X
@{exec_path} += /{usr/,}bin/Xorg
@{exec_path} += /{usr/,}bin/Xorg{,.bin}
@{exec_path} += /{usr/,}lib/Xorg{,.wrap}
@{exec_path} += /{usr/,}lib/xorg/Xorg{,.wrap}
profile xorg @{exec_path} flags=(attach_disconnected) {