felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-09-11 20:45:14 +01:00
parent 8fb8e7ced3
commit 8ff5ed7a69
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
16 changed files with 68 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

24
apparmor.d/groups/ubuntu/apport-gtk
View file

@ -19,7 +19,9 @@ profile apport-gtk @{exec_path} {
include <abstractions/python>
include <abstractions/ssl_certs>
capability fowner,
capability sys_ptrace,
capability syslog,
network inet stream,
network inet6 stream,
@ -28,26 +30,28 @@ profile apport-gtk @{exec_path} {
@{exec_path} mr,
@{libexec}/colord-sane rPx,
/{usr/,}{s,}bin/killall5 rix,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/{f,}grep rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/ischroot rix,
/{usr/,}bin/ldd rix,
/{usr/,}bin/md5sum rix,
/{usr/,}bin/which{,.debianutils} rix,
/{usr/,}lib/@{multiarch}/ld*.so* rix,
/{usr/,}bin/dpkg-query rpx,
/{usr/,}bin/pkexec rPx, # TODO: rCx or something
/{usr/,}bin/apt-cache rPx,
/{usr/,}bin/cut rix,
/{usr/,}bin/dpkg rPx,
/{usr/,}bin/dpkg-divert rPx,
/{usr/,}bin/dpkg-query rpx,
/{usr/,}bin/gdb rCx -> gdb,
/{usr/,}bin/gsettings rPx,
/{usr/,}bin/ischroot rix,
/{usr/,}bin/journalctl rPx,
/{usr/,}bin/kmod rPx,
/{usr/,}bin/ldd rix,
/{usr/,}bin/lsb_release rPx -> lsb_release,
/{usr/,}bin/md5sum rix,
/{usr/,}bin/pkexec rPx, # TODO: rCx or something
/{usr/,}bin/systemctl rPx -> child-systemctl,
/{usr/,}bin/which{,.debianutils} rix,
/{usr/,}lib/@{multiarch}/ld*.so* rix,
/usr/share/apport/root_info_wrapper rix,
/usr/share/alsa/{,**} r,
/usr/share/apport/{,**} r,
@ -68,11 +72,13 @@ profile apport-gtk @{exec_path} {
/var/crash/{,*.@{uid}.crash} rw,
/var/lib/dpkg/info/ r,
/var/lib/dpkg/info/*.list r,
/var/lib/usbutils/*.ids r,
/var/lib/dpkg/info/*.md5sums r,
/var/log/installer/media-info r,
@{run}/snapd.socket rw,
owner @{run}/user/@{uid}/wayland-[0-9] rw,
owner @{run}/user/.mutter-Xwaylandauth.* rw,
/tmp/[a-z0-9]* rw,
/tmp/apport_core_* rw,
@ -99,6 +105,8 @@ profile apport-gtk @{exec_path} {
/{usr/,}bin/iconv rix,
/{usr/,}{s,}bin/* r,
/usr/share/gcc/python/**/__pycache__/{,**} rw,
/usr/share/gdb/{,**} r,
/usr/share/themes/{,**} r,
/usr/share/gnome-shell/{,**} r,