felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-09-11 20:45:14 +01:00
parent 8fb8e7ced3
commit 8ff5ed7a69
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
16 changed files with 68 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-a-f/amarok
View file

@ -107,7 +107,7 @@ profile amarok @{exec_path} {
owner @{HOME}/.kde{,4}/share/apps/amarok/ rw,
owner @{HOME}/.kde{,4}/share/apps/amarok/albumcovers/ rw,
owner @{HOME}/.kde{,4}/share/apps/amarok/albumcovers/cache/ rw,
owner @{HOME}/.kde{,4}/share/apps/amarok/albumcovers/cache/[0-9]*@[0-9a-f]* rw,
owner @{HOME}/.kde{,4}/share/apps/amarok/albumcovers/cache/[0-9]*@@{hex} rw,
owner @{HOME}/.kde{,4}/share/apps/amarok/albumcovers/cache/[0-9]*@nocover.png rw,
owner @{HOME}/.kde{,4}/share/apps/amarok/albumcovers/cache rw,

6
apparmor.d/profiles-a-f/findmnt
View file

@ -7,10 +7,12 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/findmnt
profile findmnt @{exec_path} flags=(complain) {
profile findmnt @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base>
include <abstractions/consoles>
capability dac_read_search,
@{exec_path} mr,
/etc/fstab r,
@ -18,5 +20,7 @@ profile findmnt @{exec_path} flags=(complain) {
@{PROC}/@{pids}/mountinfo r,
deny /apparmor/.null rw,
include if exists <local/findmnt>
}

2
apparmor.d/profiles-a-f/fwupd
View file

@ -65,6 +65,8 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
@{exec_path} mr,
/{usr/,}lib/fwupd/fwupd-detect-cet rix,
/{usr/,}bin/gpg rCx -> gpg,
/{usr/,}bin/gpgconf rCx -> gpg,
/{usr/,}bin/gpgsm rCx -> gpg,