felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-18 14:31:01 +00:00
parent 437bef18ca
commit 77945674a5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
23 changed files with 67 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/kde/DiscoverNotifier
View file

@ -19,13 +19,19 @@ profile DiscoverNotifier @{exec_path} {
@{exec_path} mr,
/usr/share/metainfo/{,**} r,
/etc/flatpak/remotes.d/ r,
/var/lib/flatpak/repo/{,**} r,
owner @{user_cache_dirs}/appstream/ r,
owner @{user_cache_dirs}/appstream/** r,
owner @{user_cache_dirs}/flatpak/{,**} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/PlasmaDiscoverUpdates r,
owner @{user_share_dirs}/flatpak/{,**} rw,
@{PROC}/sys/kernel/core_pattern r,

5
apparmor.d/groups/kde/drkonqi-coredump-processor
View file

@ -9,13 +9,18 @@ include <tunables/global>
@{exec_path} = @{lib}/drkonqi-coredump-processor
profile drkonqi-coredump-processor @{exec_path} {
include <abstractions/base>
include <abstractions/qt5>
@{exec_path} mr,
/etc/machine-id r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{md5}/ r,
/{run,var}/log/journal/@{md5}/system.journal r,
/{run,var}/log/journal/@{md5}/system@@{hex}.journal r,
/{run,var}/log/journal/@{md5}/user-@{uid}.journal r,
/{run,var}/log/journal/@{md5}/user-@{uid}@@{hex}.journal r,

2
apparmor.d/groups/kde/kconf_update
View file

@ -13,6 +13,7 @@ profile kconf_update @{exec_path} {
include <abstractions/graphics>
include <abstractions/gtk>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/perl>
include <abstractions/python>
@ -93,7 +94,6 @@ profile kconf_update @{exec_path} {
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/ r,
@{PROC}/@{sys}/kernel/random/boot_id r,
@{PROC}/tty/drivers r,
@{PROC}/uptime r,
owner @{PROC}/@{pid}/cgroup r,

2
apparmor.d/groups/kde/kde-systemd-start-condition
View file

@ -12,6 +12,8 @@ profile kde-systemd-start-condition @{exec_path} {
@{exec_path} mr,
/etc/xdg/baloofilerc r,
owner @{user_config_dirs}/baloofilerc r,
owner @{user_config_dirs}/plasma-welcomerc r,

4
apparmor.d/groups/kde/kscreenlocker-greet
View file

@ -74,10 +74,12 @@ profile kscreenlocker-greet @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/kscreenlocker_greet/ w,
owner @{user_cache_dirs}/kscreenlocker_greet/** rwl,
owner @{user_cache_dirs}/ksvg-elements r,
owner @{user_cache_dirs}/plasma_theme_*.kcache rw,
owner @{user_cache_dirs}/plasma-svgelements rw,
owner @{user_cache_dirs}/plasma-svgelements-default_v* r,
owner @{user_cache_dirs}/plasma-svgelements.@{rand6} rwl -> @{user_cache_dirs}/#@{int},
owner @{user_cache_dirs}/plasma-svgelements.lock rwk,
owner @{user_cache_dirs}/plasma-svgelements{,.@{rand6}} rwl,
owner @{user_config_dirs}/kdedefaults/kscreenlockerrc r,
owner @{user_config_dirs}/kdedefaults/plasmarc r,

6
apparmor.d/groups/kde/ksmserver-logout-greeter
View file

@ -38,9 +38,9 @@ profile ksmserver-logout-greeter @{exec_path} flags=(attach_disconnected) {
owner @{user_cache_dirs}/#@{int} rwlk,
owner @{user_cache_dirs}/kcrash-metadata/ r,
owner @{user_cache_dirs}/ksmserver-logout-greeter/qmlcache/{,*} r,
owner @{user_cache_dirs}/plasma_theme_breeze-dark_v5.114.0.kcache rw,
owner @{user_cache_dirs}/plasma-svgelements r,
owner @{user_cache_dirs}/plasma-svgelements.@{rand6} l -> @{user_cache_dirs}/#@{int},
owner @{user_cache_dirs}/plasma_theme_*.kcache rw,
owner @{user_cache_dirs}/plasma-svgelements rw,
owner @{user_cache_dirs}/plasma-svgelements.@{rand6} rwl -> @{user_cache_dirs}/#@{int},
owner @{user_cache_dirs}/plasma-svgelements.lock rwk,
owner @{user_config_dirs}/ r,

16
apparmor.d/groups/kde/kwin_wayland
View file

@ -40,15 +40,19 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
/usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,*.desktop} r,
/usr/share/kwin/{,**} r,
/usr/share/libinput-*/{,**} r,
/usr/share/libinput/{,**} r,
/usr/share/plasma/desktoptheme/default/** r,
/usr/share/pipewire/client.conf r,
/usr/share/plasma/desktoptheme/** r,
/usr/share/qt/translations/*.qm r,
/etc/machine-id r,
/etc/xdg/menus/{,applications.menu} r,
/etc/pipewire/client.conf.d/ r,
/usr/share/pipewire/client.conf r,
/etc/xdg/kscreenlockerrc r,
/etc/xdg/menus/{,applications.menu} r,
/etc/xdg/menus/applications-merged/ r,
/etc/xdg/plasmarc r,
owner /var/lib/sddm/.cache/#@{int} rwk,
owner /var/lib/sddm/.cache/fontconfig/* rwk,
owner /var/lib/sddm/.cache/fontconfig/*-le64.cache-@{int}{,TMP-@{rand6},NEW,LCK} w,
@ -70,7 +74,9 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/ksycoca{5,6}_* r,
owner @{user_cache_dirs}/ksycoca{5,6}_* rwkl -> @{user_cache_dirs}/#@{int},
owner @{user_cache_dirs}/kwin/qmlcache/*.qmlc rw,
owner @{user_cache_dirs}/kwin/ w,
owner @{user_cache_dirs}/kwin/qmlcache/ w,
owner @{user_cache_dirs}/kwin/qmlcache/*.qmlc rwl,
owner @{user_cache_dirs}/kwin/qmlcache/*.qmlc.@{rand6} rwl -> @{user_cache_dirs}/kwin/qmlcache/#@{int},
owner @{user_cache_dirs}/kwin/qmlcache/#@{int} rw,
owner @{user_cache_dirs}/plasma_theme_*.kcache rw,

10
apparmor.d/groups/kde/systemsettings
View file

@ -20,23 +20,29 @@ profile systemsettings @{exec_path} {
@{bin}/kcminit rPx,
/usr/share/kcm_networkmanagement/{,**} r,
/usr/share/kinfocenter/{,**} r,
/usr/share/kpackage/{,**} r,
/usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,**} r,
/usr/share/kxmlgui5/systemsettings/systemsettingsui.rc r,
/usr/share/plasma/{,**} r,
/usr/share/systemsettings/{,**} r,
/usr/share/kinfocenter/{,**} r,
/usr/share/sddm/themes/{,**} r,
/usr/share/systemsettings/{,**} r,
/etc/fstab r,
/etc/machine-id r,
/etc/xdg/menus/ r,
/etc/xdg/ui/ui_standards.rc r,
owner @{user_cache_dirs}/#@{int} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/kinfocenter/{,**} rwl,
owner @{user_cache_dirs}/ksvg-elements rw,
owner @{user_cache_dirs}/ksvg-elements.@{rand6} rwlk -> @{user_cache_dirs}/#@{int},
owner @{user_cache_dirs}/ksvg-elements.lock rwlk,
owner @{user_cache_dirs}/ksycoca{5,6}_* r,
owner @{user_cache_dirs}/plasma_theme_*.kcache rw,
owner @{user_cache_dirs}/systemsettings/ rw,
owner @{user_cache_dirs}/systemsettings/** rwlk -> @{user_cache_dirs}/systemsettings/**,

4
apparmor.d/groups/kde/xdm-xsession
View file

@ -53,11 +53,9 @@ profile xdm-xsession @{exec_path} {
@{HOME}/.xinitrc rPix,
@{lib}/xinit/xinitrc rix,
/usr/share/bash-completion/{,**} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/mc/mc.sh r,
@{etc_ro}/profile.d/{,*} r,
@{etc_ro}/X11/xdm/scripts/{,*} r,
@{etc_ro}/X11/xim r,
@{etc_ro}/X11/xim.d/none r,
@ -71,8 +69,6 @@ profile xdm-xsession @{exec_path} {
/etc/sysconfig/* r,
owner @{HOME}/ r,
owner @{HOME}/.alias r,
owner @{HOME}/.i18n r,
owner @{user_share_dirs}/sddm/xorg-session.log rw,