felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update lxqt-panel

Browse source
This commit is contained in:
Besanon 2024-10-21 14:10:58 +02:00 • committed by GitHub
parent b5876b3cc8
commit 7838aac618
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 15 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

24
apparmor.d/groups/lxqt/lxqt-panel
View file

@ -3,7 +3,7 @@
# Copyright (C) 2024 Besanon <m231009ts@mailfence.com>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
abi <abi/4.0>,
include <tunables/global>
@ -16,10 +16,6 @@ profile lxqt-panel @{exec_path} {
include <abstractions/lxqt>
include <abstractions/nameservice-strict>
network inet dgram,
network inet stream,
network inet6 dgram,
network inet6 stream,
network inet dgram,
network inet stream,
network netlink raw,
@ -31,7 +27,6 @@ profile lxqt-panel @{exec_path} {
@{bin}/nm-connection-editor rPx,
@{bin}/xdg-open rPx,
@{bin}/ControlPanel rPx,
@{lib}/librewolf/librewolf rPx,
/usr/lib{,32,64}/lxqt-panel/*.so mr, # LXQT-Plugins
/usr/lib{,32,64}/lxqt-config/*.so mr, # LXQT-Plugins
@ -51,13 +46,18 @@ profile lxqt-panel @{exec_path} {
/etc/xdg/ui/uistandards.rc r,
/var/lib/dbus/machine-id r,
owner /opt/tor/tor-browser/Browser/browser/chrome/icons/default/default128.png r,
/opt/tor/tor-browser/Browser/browser/chrome/icons/default/*.png r,
/opt/tormedium/tor-browser/Browser/browser/chrome/icons/default/*.png r,
owner @{HOME}/.config/menus/**.menu rw,
owner @{HOME}/.config/menus/applications-merged/ r,
owner @{HOME}/Desktop/** r,
owner @{HOME}/Desktop/#@{int} rw, #new
owner @{HOME}/Desktop/*.desktop l -> @{HOME}/Desktop/#@{int}, #new
owner @{HOME}/Desktop/*.desktop rw, #new
owner @{HOME}/.local/share/desktop-directories/*.directory r,
owner @{HOME}/.local/share/gvfs-metadata/{,*} r,
owner @{HOME}/Desktop/#@{int} rw,
owner @{user_config_dirs}/lxqt/#* rw,
owner @{user_config_dirs}/lxqt/panel.conf.lock rwk,
@ -72,6 +72,11 @@ profile lxqt-panel @{exec_path} {
@{sys}/devices/@{pci_bus}/0000:00:*/ata@{int}/host@{int}/**/**/**/**/**/* r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_{cur,min,max}_freq r,
@{sys}/devices/@{pci_bus}/**/**/nvme/nvme0/nvme0n1/nvme0n1p4/uevent r,
@{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/**/host0/target0:0:0/0:0:0:0/block/sda/uevent r,
@{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/**/host0/target0:0:0/0:0:0:0/block/sdb/uevent r,
@{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/**/host0/target0:0:0/0:0:0:0/block/sda/sda2/uevent r,
@{sys}/devices/@{pci_bus}/**/**/usb@{int}/uevent r,
@{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/uevent r,
@{sys}/devices/@{pci}/usb1/1-2/1-2:*/host3/target3:0:0/3:0:0:0/block/sdb/uevent r,
@{sys}/devices/@{pci}/usb1/1-1/1-1:*/host3/target3:0:0/3:0:0:0/block/sdb/uevent r,
@{sys}/devices/@{pci}/usb2/2-2/2-2:*/host4/target4:0:0/4:0:0:0/block/sdc/sdc2/uevent r,
@ -85,7 +90,8 @@ profile lxqt-panel @{exec_path} {
/dev/pts/@{int} rw,
/dev/snd/controlC@{int} rw,
owner /tmp/#@{int} rw,
deny network inet6 dgram,
deny network inet6 stream,
include if exists <local/lxqt-panel>
}