felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): remove rule moved to the base abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-10 20:01:58 +00:00
parent beaf1bad16
commit 7882ae2153
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
78 changed files with 0 additions and 120 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/evolution-addressbook-factory
View file

@ -25,8 +25,6 @@ profile evolution-addressbook-factory @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
dbus bind bus=session name=org.gnome.evolution.dataserver.AddressBook@{int},
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**

2
apparmor.d/groups/gnome/evolution-alarm-notify
View file

@ -21,8 +21,6 @@ profile evolution-alarm-notify @{exec_path} {
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Evolution-alarm-notify
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**

2
apparmor.d/groups/gnome/evolution-calendar-factory
View file

@ -24,8 +24,6 @@ profile evolution-calendar-factory @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
dbus bind bus=session name=org.gnome.evolution.dataserver.Calendar@{int},
dbus (send, receive) bus=session path=/org/gnome/evolution/dataserver/**

2
apparmor.d/groups/gnome/evolution-source-registry
View file

@ -22,9 +22,7 @@ profile evolution-source-registry @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
dbus bind bus=session name=org.gnome.evolution.dataserver.Sources@{int},
dbus receive bus=session path=/org/gnome/evolution/dataserver/SourceManager{,/**}
interface={org.freedesktop.DBus.ObjectManager,org.freedesktop.DBus.Properties}
peer=(name=:*),

1
apparmor.d/groups/gnome/gjs-console
View file

@ -27,7 +27,6 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term hup) peer=gdm*,
# dbus: own bus=session name=org.freedesktop.Notifications

1
apparmor.d/groups/gnome/gnome-keyring-daemon
View file

@ -19,7 +19,6 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
capability ipc_lock,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term) peer=gdm,
signal (send) set=(term) peer=ssh-agent,

1
apparmor.d/groups/gnome/gnome-shell
View file

@ -65,7 +65,6 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
ptrace (read),
ptrace (readby) peer=pipewire,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (send),

2
apparmor.d/groups/gnome/gnome-shell-calendar-server
View file

@ -13,8 +13,6 @@ profile gnome-shell-calendar-server @{exec_path} {
include <abstractions/dconf-write>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Shell.CalendarServer
dbus (send receive) bus=session path=/org/gnome/evolution/dataserver/{,**}

1
apparmor.d/groups/gnome/gnome-terminal-server
View file

@ -18,7 +18,6 @@ profile gnome-terminal-server @{exec_path} {
include <abstractions/dconf-write>
include <abstractions/gnome-strict>
signal (receive) set=(cont, term) peer=@{systemd_user},
signal (send) set=(hup) peer=htop,
signal (send) set=(term hup kill) peer=unconfined,

2
apparmor.d/groups/gnome/goa-daemon
View file

@ -25,8 +25,6 @@ profile goa-daemon @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.OnlineAccounts
dbus send bus=session path=/org/gnome/Identity

2
apparmor.d/groups/gnome/goa-identity-service
View file

@ -12,8 +12,6 @@ profile goa-identity-service @{exec_path} {
include <abstractions/authentication>
include <abstractions/bus-session>
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Identity
dbus send bus=session path=/org/gnome/OnlineAccounts

1
apparmor.d/groups/gnome/gsd-a11y-settings
View file

@ -13,7 +13,6 @@ profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.A11ySettings

1
apparmor.d/groups/gnome/gsd-color
View file

@ -21,7 +21,6 @@ profile gsd-color @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Color

1
apparmor.d/groups/gnome/gsd-datetime
View file

@ -13,7 +13,6 @@ profile gsd-datetime @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Datetime

2
apparmor.d/groups/gnome/gsd-disk-utility-notify
View file

@ -13,8 +13,6 @@ profile gsd-disk-utility-notify @{exec_path} {
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.UDisks2>
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.Disks.NotificationMonitor
dbus receive bus=session

1
apparmor.d/groups/gnome/gsd-housekeeping
View file

@ -16,7 +16,6 @@ profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) {
include <abstractions/dconf-write>
include <abstractions/thumbnails-cache-read>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (receive) set=(term, hup) peer=gnome*,

1
apparmor.d/groups/gnome/gsd-keyboard
View file

@ -21,7 +21,6 @@ profile gsd-keyboard @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Keyboard

1
apparmor.d/groups/gnome/gsd-media-keys
View file

@ -24,7 +24,6 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
network netlink raw,

1
apparmor.d/groups/gnome/gsd-power
View file

@ -31,7 +31,6 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Power

1
apparmor.d/groups/gnome/gsd-print-notifications
View file

@ -18,7 +18,6 @@ profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
network inet stream,
network inet6 stream,
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (send) set=(hup) peer=gsd-printer,

1
apparmor.d/groups/gnome/gsd-printer
View file

@ -14,7 +14,6 @@ profile gsd-printer @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
signal (receive) set=(hup) peer=gsd-print-notifications,

1
apparmor.d/groups/gnome/gsd-rfkill
View file

@ -16,7 +16,6 @@ profile gsd-rfkill @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.freedesktop.NetworkManager>
include <abstractions/bus/org.gnome.SessionManager>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
network netlink raw,

1
apparmor.d/groups/gnome/gsd-screensaver-proxy
View file

@ -12,7 +12,6 @@ profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus-session>
include <abstractions/bus/org.gnome.SessionManager>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.freedesktop.ScreenSaver

1
apparmor.d/groups/gnome/gsd-sharing
View file

@ -15,7 +15,6 @@ profile gsd-sharing @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gnome.SessionManager>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Sharing

1
apparmor.d/groups/gnome/gsd-smartcard
View file

@ -15,7 +15,6 @@ profile gsd-smartcard @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict>
include <abstractions/p11-kit>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Smartcard

1
apparmor.d/groups/gnome/gsd-sound
View file

@ -15,7 +15,6 @@ profile gsd-sound @{exec_path} flags=(attach_disconnected) {
include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Sound

2
apparmor.d/groups/gnome/gsd-usb-protection
View file

@ -11,8 +11,6 @@ profile gsd-usb-protection @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
signal (receive) set=(cont, term) peer=systemd-user,
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

1
apparmor.d/groups/gnome/gsd-wacom
View file

@ -19,7 +19,6 @@ profile gsd-wacom @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
signal (receive) set=(term, hup) peer=gdm*,
# dbus: own bus=session name=org.gnome.SettingsDaemon.Wacom

2
apparmor.d/groups/gnome/gsd-xsettings
View file

@ -30,8 +30,6 @@ profile gsd-xsettings @{exec_path} {
network inet6 dgram,
network netlink raw,
signal (receive) set=(cont, term) peer=systemd-user,
# dbus: own bus=session name=org.gnome.SettingsDaemon.XSettings
# dbus: own bus=session name=org.gtk.Settings

2
apparmor.d/groups/gnome/mutter-x11-frames
View file

@ -17,8 +17,6 @@ profile mutter-x11-frames @{exec_path} {
include <abstractions/graphics>
include <abstractions/nameservice-strict>
signal (receive) set=(cont, term) peer=systemd-user,
@{exec_path} mr,
/usr/share/dconf/profile/gdm r,

1
apparmor.d/groups/gnome/tracker-extract
View file

@ -25,7 +25,6 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (receive) set=(cont term) peer=@{systemd_user},
signal (receive) set=(term) peer=gdm,
# dbus: own bus=session name=org.freedesktop.Tracker3.Miner.Extract

1
apparmor.d/groups/gnome/tracker-miner
View file

@ -25,7 +25,6 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (receive) set=(cont term) peer=@{systemd_user},
signal (receive) set=(term, kill) peer=gdm,
signal (receive) set=(hup) peer=gdm-session-worker,