felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): cleanup common desktop files.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-21 23:28:57 +00:00
parent 0d16d4fdab
commit 87db46113c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 18 additions and 53 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/abstractions/audio2
View file

@ -2,7 +2,8 @@
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# Modernised version of <abstractions/audio>, will be merged with it.
# Modernized version of <abstractions/audio>, will be merged with it. It should
# only be used by audio servers that need direct access to device files.
include <abstractions/audio-client>

4
apparmor.d/abstractions/bwrap-app
View file

@ -5,8 +5,8 @@
# Common rules for applications sandboxed using bwrap.
# This abstraction is wide on purpose. It is meant to be used by sandbox
# applications (bwrap) that have no way to restrict access depending of the
# application beeing confined.
# applications (bwrap) that have no way to restrict access depending on the
# application being confined.
include <abstractions/audio-client>
include <abstractions/bus-accessibility>

2
apparmor.d/abstractions/desktop
View file

@ -2,7 +2,7 @@
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# Unified minimal abstaction for all UI application regardless of the desktop environment.
# Unified minimal abstraction for all UI application regardless of the desktop environment.
# When supported in apparmor, condition will be used in this abstraction to filter
# resources specific for supported DE.

5
apparmor.d/abstractions/freedesktop.org.d/complete
View file

@ -6,13 +6,16 @@
@{system_share_dirs}/*ubuntu/applications/{,**} r,
@{system_share_dirs}/gnome/applications/{,**} r,
@{system_share_dirs}/xfce4/applications/{,**} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
@{system_share_dirs}/glib-2.0/schemas/ r,
@{system_share_dirs}/glib-2.0/schemas/gschemas.compiled r,
/usr/share/mime/ r,
/etc/gnome/defaults.list r,
/etc/xfce4/defaults.list r,
/var/lib/snapd/desktop/applications/{,**} r,
/var/lib/snapd/desktop/icons/{,**} r,
owner @{HOME}/.icons/{,**} r,