felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update apparmor profiles

Browse source
This commit is contained in:
Alexandre Pujol 2021-10-22 15:41:13 +01:00
parent 6c34573727
commit 7da59b4984
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 122 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/apps/signal-desktop
View file

@ -21,6 +21,7 @@ profile signal-desktop @{exec_path} {
include <abstractions/audio>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/deny-root-dir-access>
# Needed?
@ -95,6 +96,8 @@ profile signal-desktop @{exec_path} {
/var/lib/dbus/machine-id r,
/etc/machine-id r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
# No new privs
/{usr/,}bin/xdg-settings rPUx,

1
apparmor.d/groups/apps/telegram-desktop
View file

@ -21,6 +21,7 @@ profile telegram-desktop @{exec_path} {
include <abstractions/user-download-strict>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/qt5-shader-cache>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/enchant>

1
apparmor.d/groups/apt/apt-listchanges
View file

@ -61,6 +61,7 @@ profile apt-listchanges @{exec_path} {
owner /tmp/apt-listchanges*/*/*/*/*/*/changelog.gz rw,
owner /tmp/apt-listchanges*/*/*/*/*/*/changelog/changelog_to_file rw,
owner /tmp/apt-listchanges*/*/*/*/*/*/changelog/simple_changelog rw,
owner /tmp/apt-listchanges*/*/*/*/*/*/*-local/debian/changelog rw,
# The following is needed when apt-listchanges uses debcconf GUI frontends.
include <abstractions/gtk>

2
apparmor.d/groups/bus/dbus-daemon
View file

@ -26,7 +26,7 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
network bluetooth stream,
network bluetooth seqpacket,
ptrace (read) peer=unconfined,
ptrace (read),
@{exec_path} mr,

2
apparmor.d/groups/gvfs/gvfsd-smb
View file

@ -24,6 +24,8 @@ profile gvfsd-smb @{exec_path} {
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/etc/samba/smb.conf r,

2
apparmor.d/groups/gvfs/gvfsd-smb-browse
View file

@ -24,6 +24,8 @@ profile gvfsd-smb-browse @{exec_path} {
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/etc/samba/smb.conf r,

2
apparmor.d/groups/gvfs/gvfsd-trash
View file

@ -27,7 +27,7 @@ profile gvfsd-trash @{exec_path} {
@{run}/mount/utab r,
owner @{run}/user/@{uid}/gvfsd/ rw,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{run}/user/@{uid}/gvfsd/socket-* rw,
# Can restore all user files
owner @{HOME}/{,**} rw,