felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): update snap profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-05 23:33:58 +01:00
parent 245db40b2d
commit 7b4979cc63
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 34 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/profiles-s-z/snap
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{bin_dirs} = @{bin}/ /snap/snapd/@{int}@{bin}/
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}/
@{bin_dirs} = @{bin}/ /snap/snapd/@{int}@{bin}
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}
@{exec_path} = @{bin_dirs}/snap
profile snap @{exec_path} {
@ -23,7 +23,7 @@ profile snap @{exec_path} {
unix (send, receive) type=stream peer=(label=apt),
mount options=(ro, silent) -> /tmp/snapd-auto-import-mount-[0-9]*/,
mount options=(ro, silent) -> /tmp/snapd-auto-import-mount-@{int}/,
dbus (send, receive) bus=session path=/org/freedesktop/
interface=org.freedesktop.systemd1.Manager
@ -34,6 +34,9 @@ profile snap @{exec_path} {
interface=org.freedesktop.systemd1.Manager
member={StartTransientUnit,JobRemoved},
dbus (send, receive) bus=system path=/org/freedesktop/systemd1
interface=org.freedesktop.systemd1.Manager,
dbus send bus=session path=/org/freedesktop/portal/documents
interface=org.freedesktop.portal.Documents
member=GetMountPoint
@ -59,8 +62,9 @@ profile snap @{exec_path} {
@{HOME}/snap/{,**} rw,
owner /tmp/snapd-auto-import-mount-[0-9]*/ rw,
owner /tmp/snapd-auto-import-mount-@{int}/ rw,
@{run}/user/@{uid}/bus rw,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* r,
owner @{run}/user/@{uid}/gdm/Xauthority r,
owner @{run}/user/@{uid}/snapd-session-agent.socket rw,