felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update signal-desktop

Browse source
This commit is contained in:
fira959 2024-05-14 21:47:22 +02:00 • committed by GitHub
parent 855f25da9b
commit 8c90c2ad98
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/groups/apps/signal-desktop
View file

@ -8,7 +8,8 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{name} = signal-desktop{,-beta} @{name} = signal-desktop{,-beta}
@{lib_dirs} = "/opt/Signal{, Beta}" @{lib_dirs} = "/usr/lib/signal-desktop"
@{lib_dirs} += "/opt/Signal{, Beta}"
@{config_dirs} = "@{user_config_dirs}/Signal{, Beta}" @{config_dirs} = "@{user_config_dirs}/Signal{, Beta}"
@{exec_path} = @{lib_dirs}/@{name} @{exec_path} = @{lib_dirs}/@{name}
@ -16,7 +17,6 @@ profile signal-desktop @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/chromium> include <abstractions/common/chromium>
include <abstractions/consoles>
include <abstractions/desktop> include <abstractions/desktop>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/graphics> include <abstractions/graphics>
@ -47,6 +47,7 @@ profile signal-desktop @{exec_path} {
@{lib_dirs}/resources/app.asar.unpacked/node_modules/**.node mr, @{lib_dirs}/resources/app.asar.unpacked/node_modules/**.node mr,
@{lib_dirs}/resources/app.asar.unpacked/node_modules/**.so mr, @{lib_dirs}/resources/app.asar.unpacked/node_modules/**.so mr,
@{lib_dirs}/resources/app.asar.unpacked/node_modules/**.so.@{int} mr, @{lib_dirs}/resources/app.asar.unpacked/node_modules/**.so.@{int} mr,
@{lib_dirs}/chrome_crashpad_handler rix,
/var/lib/dbus/machine-id r, /var/lib/dbus/machine-id r,
/etc/machine-id r, /etc/machine-id r,
@ -69,5 +70,11 @@ profile signal-desktop @{exec_path} {
owner @{PROC}/@{pids}/task/ r, owner @{PROC}/@{pids}/task/ r,
owner @{PROC}/@{pids}/task/@{tid}/status r, owner @{PROC}/@{pids}/task/@{tid}/status r,
@{sys}/devices/system/cpu/kernel_max r,
@{sys}/devices/virtual/tty/tty0/active r,
@{sys}/fs/cgroup/user.slice/user-1001.slice/session-1.scope/cpu.max r,
@{sys}/fs/cgroup/user.slice/user-1001.slice/session-1.scope/memory.high r,
@{sys}/fs/cgroup/user.slice/user-1001.slice/session-1.scope/memory.max r,
include if exists <local/signal-desktop> include if exists <local/signal-desktop>
} }