Akonadi and plasmashell updates (#163)

* Update plasmashell

* Update akonadi_akonotes_resource

* Update akonadi_archivemail_agent

* Update akonadi_birthdays_resource

* Update akonadi_contacts_resource

* Update akonadi_control

* Update akonadi_followupreminder_agent

* Update akonadi_ical_resource

* Update akonadi_indexing_agent

* Update akonadi_maildir_resource

* Update akonadi_maildispatcher_agent

* Update akonadi_mailfilter_agent

* Update akonadi_mailmerge_agent

* Update akonadi_migration_agent

* Update akonadi_newmailnotifier_agent

* Update akonadi_sendlater_agent

* Update akonadi_unifiedmailbox_agent

* Revert change

* Revert change

* Revert change

* Revert change

* Revert change and add dri-enumerate abstraction

* Revert change

* Revert change and add dri-enumerate abstraction

* Revert change

* Revert change

* Revert change

* Revert change

* Revert change and add dri-enumerate abstraction

* Revert change

* Revert change

* Revert change

* Revert change

* Removing /usr/share/icons/{,**} again

* Adding the audio abstraction

* Adding the consoles abstraction

* plasmashell: adding back /dev/shm/ r, and /dev/ptmx rw,

* akonadi_mailfilter_agent: removing the user-tmp abstraction

I haven't been able to observe new related requests.

---------

Co-authored-by: Alex <roddhjav@users.noreply.github.com>
This commit is contained in:
curiosityseeker 2023-06-14 23:46:34 +02:00 committed by GitHub
parent d4d1b949cd
commit 98e59e9336
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
17 changed files with 68 additions and 39 deletions

View file

@ -10,6 +10,8 @@ include <tunables/global>
profile plasmashell @{exec_path} {
include <abstractions/base>
include <abstractions/app-launcher-user>
include <abstractions/audio>
include <abstractions/consoles>
include <abstractions/dbus-session-strict>
include <abstractions/disks-read>
include <abstractions/dri-common>
@ -41,6 +43,7 @@ profile plasmashell @{exec_path} {
@{libexec}/libheif/ r,
@{libexec}/libheif/*.so* rm,
@{libexec}/kf5/kioslave5 rPx,
@{libexec}/kf5/kdesu{,d} rix,
/{usr/,}bin/dolphin rPUx, # TODO: rPx,
/{usr/,}bin/plasma-discover rPUx,
@ -55,11 +58,15 @@ profile plasmashell @{exec_path} {
/usr/share/krunner/{,**} r,
/usr/share/konsole/ r,
/usr/share/akonadi/firstrun/{,*} r,
/usr/share/lshw/artwork/logo.svg r,
/usr/share/knotifications5/*.notifyrc r,
/usr/share/desktop-directories/kf5-*.directory r,
/etc/appstream.conf r,
/etc/cups/client.conf r,
/etc/fstab r,
/etc/machine-id r,
/etc/pipewire/client.conf.d/ r,
/etc/pulse/client.conf r,
/etc/pulse/client.conf.d/ r,
/etc/xdg/baloofilerc r,
@ -69,6 +76,7 @@ profile plasmashell @{exec_path} {
/etc/xdg/krunnerrc r,
/etc/xdg/kwinrc r,
/etc/xdg/menus/ r,
/etc/xdg/menus/applications.menu r,
/etc/xdg/menus/applications-merged/ r,
/etc/xdg/plasmanotifyrc r,
/etc/xdg/plasmarc r,
@ -81,6 +89,7 @@ profile plasmashell @{exec_path} {
owner @{user_cache_dirs}/ r,
owner @{user_cache_dirs}/#[0-9]* rw,
owner @{user_cache_dirs}/event-sound-cache.tdb.*.x86_64-pc-linux-gnu rwk,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/ksycoca5_* r,
owner @{user_cache_dirs}/org.kde.dirmodel-qml.kcache rw,
@ -111,7 +120,9 @@ profile plasmashell @{exec_path} {
owner @{user_config_dirs}/plasma-org.kde.plasma.desktop-appletsrc.?????? rk,
owner @{user_config_dirs}/plasma-pk-updates r,
owner @{user_config_dirs}/plasma*desktop* rwlk,
owner @{user_config_dirs}/plasmanotifyrc r,
owner @{user_config_dirs}/plasmanotifyrc rw,
owner @{user_config_dirs}/plasmanotifyrc.lock rwk,
owner @{user_config_dirs}/plasmanotifyrc.* rwl,
owner @{user_config_dirs}/plasmaparc r,
owner @{user_config_dirs}/plasmashellrc r,
owner @{user_config_dirs}/pulse/cookie rwk,
@ -135,6 +146,7 @@ profile plasmashell @{exec_path} {
owner @{user_share_dirs}/user-places.xbel r,
owner @{run}/user/@{uid}/#[0-9]* rw,
owner @{run}/user/@{uid}/kdesud_:1 w,
owner @{run}/user/@{uid}/plasmashell??????.[0-9].kioworker.socket rwl,
owner @{run}/user/@{uid}/gvfs/ r,
owner @{run}/user/@{uid}/pulse/ rw,
@ -148,9 +160,11 @@ profile plasmashell @{exec_path} {
owner @{PROC}/@{pid}/environ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/{cgroup,cmdline,stat,statm} r,
owner @{PROC}/@{pid}/attr/current r,
/dev/shm/ r,
/dev/tty r,
/dev/ptmx rw,
include if exists <local/plasmashell>
}