felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-04-08 19:28:10 +01:00
parent f96e5a9713
commit 900ef19cff
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
36 changed files with 59 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/gnome/gdm-session
View file

@ -55,8 +55,7 @@ profile gdm-session @{exec_path} {
owner @{gdm_config_dirs}/dconf/user r,
owner @{GDM_HOME}/greeter-dconf-defaults r,
owner @{run}/gdm{3,}/custom.conf r,
@{run}/gdm{3,}/custom.conf r,
owner @{run}/user/@{uid}/gdm/ w,
owner @{run}/user/@{uid}/gdm/Xauthority rw, # only: xorg

2
apparmor.d/groups/gnome/gnome-calendar
View file

@ -39,6 +39,8 @@ profile gnome-calendar @{exec_path} {
@{exec_path} mr,
@{open_path} rPx -> child-open-help,
/usr/share/evolution-data-server/{,**} r,
/usr/share/libgweather/Locations.xml r,

2
apparmor.d/groups/gnome/gnome-characters
View file

@ -27,6 +27,8 @@ profile gnome-characters @{exec_path} {
@{bin}/gjs-console rix,
@{open_path} rPx -> child-open-help,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/org.gnome.Characters/org.gnome.Characters.*.gresource r,
/usr/share/nvidia/nvidia-application-profiles-*-rc r,

2
apparmor.d/groups/gnome/gnome-contacts
View file

@ -29,6 +29,8 @@ profile gnome-contacts @{exec_path} {
@{exec_path} mr,
@{open_path} rPx -> child-open-help,
owner @{user_cache_dirs}/evolution/addressbook/{,**} r,
owner @{user_config_dirs}/gnome-contacts/{,**} rw,
owner @{user_share_dirs}/folks/relationships.ini r,

2
apparmor.d/groups/gnome/gnome-control-center-goa-helper
View file

@ -41,7 +41,7 @@ profile gnome-control-center-goa-helper @{exec_path} {
@{bin}/bwrap rPUx,
@{lib}/{,@{multiarch}/}webkit{,2}gtk-*/WebKitNetworkProcess rix,
@{lib}/{,@{multiarch}/}webkit{2,}gtk-*/WebKitNetworkProcess rix,
/usr/share/cracklib/* r,
/usr/share/publicsuffix/public_suffix_list.dafsa r,

2
apparmor.d/groups/gnome/gnome-disks
View file

@ -19,7 +19,7 @@ profile gnome-disks @{exec_path} {
@{exec_path} mr,
@{open_path} rPx -> child-open,
@{open_path} rPx -> child-open-help,
owner @{user_cache_dirs}/gnome-disks/{,**} rw,

2
apparmor.d/groups/gnome/gnome-extension-gsconnect
View file

@ -44,7 +44,7 @@ profile gnome-extension-gsconnect @{exec_path} {
@{lib}/gio/modules/*.so* rm,
@{lib}/girepository-1.0/* r,
@{open_path} rPx -> child-open,
@{open_path} rPx -> child-open-help,
@{share_dirs}/{,**} r,
@{share_dirs}/gsconnect-preferences rix,

2
apparmor.d/groups/gnome/gnome-extension-manager
View file

@ -26,7 +26,7 @@ profile gnome-extension-manager @{exec_path} {
@{bin}/gjs-console rix,
@{open_path} rPx -> child-open,
@{open_path} rPx -> child-open-help,
/usr/share/gnome-shell/org.gnome.Shell.Extensions r,

2
apparmor.d/groups/gnome/gnome-extensions-app
View file

@ -19,7 +19,7 @@ profile gnome-extensions-app @{exec_path} {
@{sh_path} rix,
@{bin}/gjs-console rix,
@{open_path} rPx -> child-open,
@{open_path} rPx -> child-open-help,
/usr/share/gnome-shell/org.gnome.Extensions* r,
/usr/share/icu/@{int}.@{int}/*.dat r,

2
apparmor.d/groups/gnome/gnome-music
View file

@ -31,6 +31,8 @@ profile gnome-music @{exec_path} flags=(attach_disconnected) {
@{bin}/python3.@{int} rix,
@{lib}/python3.@{int}/site-packages/gnomemusic/__pycache__/{,**} rw,
@{open_path} rPx -> child-open-help,
/usr/share/grilo-plugins/grl-lua-factory/{,*} r,
/usr/share/org.gnome.Music/{,**} r,
/usr/share/tracker3/{,**} r,

2
apparmor.d/groups/gnome/gnome-recipes
View file

@ -25,6 +25,8 @@ profile gnome-recipes @{exec_path} {
@{bin}/tar rix,
@{open_path} rPx -> child-open-help,
/usr/share/gnome-recipes/{,**} r,
owner @{user_cache_dirs}/gnome-recipes/{,**} rw,

5
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -83,8 +83,6 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
owner @{GDM_HOME}/greeter-dconf-defaults r,
owner @{gdm_share_dirs}/applications/{,**} r,
owner /tmp/dirs-@{rand6} rw,
owner @{user_config_dirs}/autostart/{,*.desktop} r,
owner @{user_config_dirs}/gnome-session/ rw,
owner @{user_config_dirs}/gnome-session/saved-session/ rw,
@ -122,6 +120,7 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
@{bin}/blueman-applet rPx,
@{bin}/firewall-applet rPx,
@{bin}/gnome-keyring-daemon rPx,
@{bin}/gnome-shell rPx,
@{bin}/gnome-software rPx,
@{bin}/im-launch rPx,
@{bin}/keepassxc rPx,
@ -153,6 +152,8 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
@{lib}/kdeconnectd rPUx,
@{lib}/@{multiarch}/{,libexec/}kdeconnectd rPUx,
/dev/tty@{int} rw,
include if exists <usr/gnome-session-binary_open.d>
include if exists <local/gnome-session-binary_open>
}

2
apparmor.d/groups/gnome/gnome-tweaks
View file

@ -21,6 +21,8 @@ profile gnome-tweaks @{exec_path} {
@{bin}/ps rPx,
@{bin}/python3.@{int} rix,
@{open_path} rPx -> child-open-help,
@{lib}/python3.@{int}/site-packages/gtweak/{,*/,**/}__pycache__/*pyc* w,
/usr/share/gnome-tweaks/{,**} r,

2
apparmor.d/groups/gnome/kgx
View file

@ -30,7 +30,7 @@ profile kgx @{exec_path} {
@{bin}/nvtop rPx,
@{bin}/vim rUx,
@{open_path} rPx -> child-open,
@{open_path} rPx -> child-open-help,
owner /tmp/#@{int} rw,

1
apparmor.d/groups/gnome/loupe
View file

@ -22,6 +22,7 @@ profile loupe @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{bin}/bwrap rCx -> bwrap,
@{open_path} rPx -> child-open-help,
/usr/share/glycin-loaders/{,**} r,

2
apparmor.d/groups/gnome/seahorse
View file

@ -32,6 +32,8 @@ profile seahorse @{exec_path} {
@{bin}/gpg{,2} rPx,
@{bin}/gpgsm rPx,
@{open_path} rPx -> child-open-help,
/etc/pki/trust/blocklist/ r,
/etc/gcrypt/hwf.deny r,