felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

freedesktop

Browse source
This commit is contained in:
nobody43 2023-02-25 18:44:21 +00:00 • committed by Alex
parent 491d2176a8
commit 8c0e0a9de1
90 changed files with 48 additions and 137 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-a-f/appstreamcli
View file

@ -23,10 +23,8 @@ profile appstreamcli @{exec_path} flags=(complain) {
/usr/share/app-info/{,**} r,
/usr/share/appdata/ r,
/usr/share/applications/{,*.desktop} r,
/usr/share/metainfo/ r,
/usr/share/metainfo/*.{metainfo,appdata}.xml r,
/usr/share/mime/mime.cache r,
/usr/share/swcatalog/{,**} r,
/etc/appstream.conf r,
@ -35,7 +33,6 @@ profile appstreamcli @{exec_path} flags=(complain) {
owner @{user_cache_dirs}/appstream-cache-*.mdb rw,
owner @{user_cache_dirs}/appstream/ rw,
owner @{user_cache_dirs}/appstream/appcache-*.mdb rw,
owner @{user_share_dirs}/mime/mime.cache r,
/var/lib/app-info/ w,
/var/lib/app-info/yaml/ r,
@ -60,6 +57,11 @@ profile appstreamcli @{exec_path} flags=(complain) {
owner @{PROC}/@{pid}/fd/ r,
# freedesktop.org-strict
/usr/share/applications/{,*.desktop} r,
/usr/share/mime/mime.cache r,
owner @{user_share_dirs}/mime/mime.cache r,
profile curl {
include <abstractions/base>
include <abstractions/nameservice-strict>

1
apparmor.d/profiles-a-f/arduino
View file

@ -82,7 +82,6 @@ profile arduino @{exec_path} {
owner @{run}/lock/tmp* rw,
owner @{run}/lock/LCK..ttyS[0-9]* rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/coredump_filter rw,

1
apparmor.d/profiles-a-f/atril
View file

@ -51,7 +51,6 @@ profile atril @{exec_path} {
/usr/share/atril/{,**} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mountinfo r,

1
apparmor.d/profiles-a-f/blueman
View file

@ -36,7 +36,6 @@ profile blueman @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/xdg-open rCx -> open,
/usr/share/blueman/{,**} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/X11/xkb/{,**} r,
/etc/machine-id r,

1
apparmor.d/profiles-a-f/cawbird
View file

@ -39,7 +39,6 @@ profile cawbird @{exec_path} {
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/cawbird-* rw,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/xml/iso-codes/iso_[0-9]*-[0-9]*.xml r,

1
apparmor.d/profiles-a-f/claws-mail
View file

@ -34,7 +34,6 @@ profile claws-mail @{exec_path} flags=(complain) {
/{usr/,}{s,}bin/exim4 rPUx,
/{usr/,}bin/geany rPUx,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/publicsuffix/*.dafsa r,
/usr/share/sounds/freedesktop/stereo/*.oga r,

1
apparmor.d/profiles-a-f/czkawka-gui
View file

@ -37,7 +37,6 @@ profile czkawka-gui @{exec_path} {
@{sys}/fs/cgroup/{,**} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
profile open {
include <abstractions/base>

1
apparmor.d/profiles-a-f/deltachat-desktop
View file

@ -47,7 +47,6 @@ profile deltachat-desktop @{exec_path} {
owner @{HOME}/.config/DeltaChat/ rw,
owner @{HOME}/.config/DeltaChat/** rwk,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner /tmp/@{hex}/ rw,
owner /tmp/@{hex}/db.sqlite-blobs/ rw,

1
apparmor.d/profiles-a-f/dino-im
View file

@ -31,7 +31,6 @@ profile dino-im @{exec_path} {
/{usr/,}bin/gpgconf rCx -> gpg,
/{usr/,}bin/gpgsm rCx -> gpg,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{user_share_dirs}/dino/ rw,
owner @{user_share_dirs}/dino/** rwk,

1
apparmor.d/profiles-a-f/engrampa
View file

@ -125,7 +125,6 @@ profile engrampa @{exec_path} {
/etc/magic r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
# gnome-tiny
@{run}/mount/utab r,

1
apparmor.d/profiles-a-f/exo-helper
View file

@ -47,7 +47,6 @@ profile exo-helper @{exec_path} {
/etc/fstab r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
# file_inherit
owner /dev/tty[0-9]* rw,

1
apparmor.d/profiles-a-f/file-roller
View file

@ -19,7 +19,6 @@ profile file-roller @{exec_path} {
/{usr/,}bin/unzip rix,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/themes/{,**} r,
/usr/share/X11/xkb/{,**} r,

5
apparmor.d/profiles-a-f/firecfg
View file

@ -28,10 +28,11 @@ profile firecfg @{exec_path} flags=(attach_disconnected) {
/usr/local/bin/ r,
/usr/local/bin/* rw,
# freedesktop.org-strict
/usr/share/applications/ r,
/usr/share/applications/*.desktop r,
@{user_share_dirs}/applications/ r,
@{user_share_dirs}/applications/*.desktop rw,
/dev/tty rw,
@ -39,4 +40,4 @@ profile firecfg @{exec_path} flags=(attach_disconnected) {
deny /apparmor/.null rw,
include if exists <local/firecfg>
}
}

1
apparmor.d/profiles-a-f/font-manager
View file

@ -29,7 +29,6 @@ profile font-manager @{exec_path} {
/{usr/,}lib/@{multiarch}/webkit*gtk-*/WebKitWebProcess rix,
/{usr/,}lib/@{multiarch}/webkit*gtk-*/WebKitNetworkProcess rix,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/font-manager/ rw,