felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): make profile entrypoint more universal.

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-04 23:28:17 +00:00
parent e031c129ed
commit 6e56cfccc9
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
70 changed files with 122 additions and 147 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/evolution-addressbook-factory
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/evolution-addressbook-factory
@{exec_path} = @{libexec}/{,evolution-data-server/}evolution-addressbook-factory
profile evolution-addressbook-factory @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-network-manager-strict>

2
apparmor.d/groups/gnome/evolution-alarm-notify
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/evolution-data-server/evolution-alarm-notify
@{exec_path} = @{libexec}/evolution-data-server/{,evolution-data-server/}evolution-alarm-notify
profile evolution-alarm-notify @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-session>

2
apparmor.d/groups/gnome/evolution-calendar-factory
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/evolution-calendar-factory
@{exec_path} = @{libexec}/{,evolution-data-server/}evolution-calendar-factory
profile evolution-calendar-factory @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-network-manager-strict>

2
apparmor.d/groups/gnome/evolution-source-registry
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/evolution-source-registry
@{exec_path} = @{libexec}/{,evolution-data-server/}evolution-source-registry
profile evolution-source-registry @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-session-strict>

6
apparmor.d/groups/gnome/gdm-session-worker
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/gdm-session-worker
@{exec_path} = @{libexec}/{,gdm/}gdm-session-worker
profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/authentication>
@ -58,9 +58,9 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
@{libexec}/{,gdm/}gdm-wayland-session rPx,
@{libexec}/{,gdm/}gdm-x-session rPx,
/{usr/,}bin/gnome-keyring-daemon rPx,
@{libexec}/gdm-wayland-session rPx,
@{libexec}/gdm-x-session rPx,
/etc/gdm{3,}/{Pre,Post}Session/Default rix,
/etc/gdm{3,}/PrimeOff/Default rix,

2
apparmor.d/groups/gnome/gdm-wayland-session
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/gdm-wayland-session
@{exec_path} = @{libexec}/{,gdm/}gdm-wayland-session
profile gdm-wayland-session @{exec_path} {
include <abstractions/base>
include <abstractions/bash>

2
apparmor.d/groups/gnome/gnome-contacts-search-provider
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-contacts-search-provider
@{exec_path} = @{libexec}/gnome-contacts-search-provider
profile gnome-contacts-search-provider @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>

6
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -147,12 +147,12 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
@{libexec}/gnome-session-check-accelerated-gl-helper rix,
@{libexec}/gnome-session-check-accelerated-gles-helper rix,
@{libexec}/gnome-session-failed rix,
@{libexec}/gnome-shell-overrides-migration.sh rix,
@{libexec}/{,gnome-shell/}gnome-shell-overrides-migration.sh rix,
@{libexec}/gsd-* rPx,
# TODO: rCx gio-launch-desktop and put all the following program in this
# subprofile. Not done yet as it breaks compatibility with Ubuntu/Debian
/{usr/,}lib/gio-launch-desktop rix,
@{libexec}/gio-launch-desktop rix,
/{usr/,}bin/aa-notify rPx,
/{usr/,}bin/baloo_file rPUx,
@ -180,8 +180,8 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
/{usr/,}lib/xapps/sn-watcher/* rPUx,
/{usr/,}share/libpam-kwallet-common/pam_kwallet_init rPUx,
@{libexec}/deja-dup/deja-dup-monitor rPUx,
@{libexec}/evolution-data-server/evolution-alarm-notify rPx,
@{libexec}/gsd-disk-utility-notify rPx,
@{libexec}/evolution-data-server/{,evolution-data-server/}evolution-alarm-notify rPx,
/usr/share/applications/{,**} r,
/usr/share/dconf/profile/gdm r,

2
apparmor.d/groups/gnome/gnome-shell-calendar-server
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/gnome-shell-calendar-server
@{exec_path} = @{libexec}/{,gnome-shell/}gnome-shell-calendar-server
profile gnome-shell-calendar-server @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-session-strict>