felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): rewrite all xdg script profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-03 11:47:58 +01:00
parent 35b305f043
commit 896254c2ec
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
9 changed files with 255 additions and 223 deletions
Download patch file Download diff file Expand all files Collapse all files

55
apparmor.d/groups/freedesktop/xdg-screensaver
View file

@ -8,38 +8,49 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/xdg-screensaver
profile xdg-screensaver @{exec_path} {
profile xdg-screensaver @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/freedesktop.org>
@{exec_path} r,
@{bin}/ r,
@{sh_path} rix,
@{bin}/{,e}grep ix,
@{bin}/{m,g,}awk ix,
@{bin}/basename ix,
@{bin}/cat ix,
@{bin}/cut ix,
@{bin}/dirname ix,
@{bin}/kill ix,
@{bin}/ln ix,
@{bin}/lockfile ix,
@{bin}/mktemp ix,
@{bin}/mv ix,
@{bin}/perl ix,
@{bin}/readlink ix,
@{bin}/realpath ix,
@{bin}/rm ix,
@{bin}/sed ix,
@{bin}/uname ix,
@{bin}/xautolock ix,
@{sh_path} rix,
@{bin}/mv rix,
@{bin}/{,e}grep rix,
@{bin}/sed rix,
@{bin}/which{,.debianutils} rix,
@{bin}/cat rix,
@{bin}/uname rix,
@{bin}/dbus-send Cx -> bus,
@{bin}/xprop Px,
@{bin}/xset Px,
@{bin}/ps Px,
@{bin}/hostname Px,
@{bin}/xautolock rix,
@{bin}/dbus-send rix,
profile bus flags=(complain) {
include <abstractions/base>
include <abstractions/app/bus>
include <abstractions/bus-session>
@{bin}/xprop rPx,
@{bin}/xdg-mime rPx,
@{bin}/xset rPx,
@{bin}/hostname rix,
#aa:dbus talk bus=session name=org.freedesktop.ScreenSaver label=gsd-screensaver-proxy
#aa:dbus talk bus=session name=org.gnome.ScreenSaver label=gjs-console
owner @{HOME}/ r,
owner @{HOME}/.Xauthority r,
owner @{tmp}/xauth-@{int}-_[0-9] r,
owner @{run}/user/@{uid}/ r,
/dev/dri/card@{int} rw,
include if exists <local/xdg-screensaver_bus>
}
include if exists <local/xdg-screensaver>
}