felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Replace @{HOME}/.cache with @{user_cache_dirs}

Browse source
This commit is contained in:
ShellCode33 2023-07-26 23:56:35 +02:00
parent 477d3488a9
commit 9b268e0036
No known key found for this signature in database
GPG key ID: 8F94C574DA3B4DB0
12 changed files with 24 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/abstractions/thumbnails-cache-write
View file

@ -7,7 +7,7 @@
owner @{HOME}/thumbnails/ rw, owner @{HOME}/thumbnails/ rw,
owner @{HOME}/thumbnails/{large,normal}/ rw, owner @{HOME}/thumbnails/{large,normal}/ rw,
owner @{HOME}/thumbnails/{large,normal}/#[0-9]*[0-9] rw, owner @{HOME}/thumbnails/{large,normal}/#[0-9]*[0-9] rw,
owner @{HOME}/thumbnails/{large,normal}/[a-f0-9]*.png rwl -> @{HOME}/.cache/thumbnails/{large,normal}/#[0-9]*[0-9], owner @{HOME}/thumbnails/{large,normal}/[a-f0-9]*.png rwl -> @{user_cache_dirs}/thumbnails/{large,normal}/#[0-9]*[0-9],
owner @{user_cache_dirs}/thumbnails/ rw, owner @{user_cache_dirs}/thumbnails/ rw,
owner @{user_cache_dirs}/thumbnails/{large,normal}/ rw, owner @{user_cache_dirs}/thumbnails/{large,normal}/ rw,

2
apparmor.d/groups/apps/discord
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{DISCORD_LIBDIR} += /usr/share/discord-ptb /opt/discord @{DISCORD_LIBDIR} += /usr/share/discord-ptb /opt/discord
@{DISCORD_HOMEDIR} = @{user_config_dirs}/discord @{DISCORD_HOMEDIR} = @{user_config_dirs}/discord
@{DISCORD_HOMEDIR} += @{user_config_dirs}/discordptb @{DISCORD_HOMEDIR} += @{user_config_dirs}/discordptb
@{DISCORD_CACHEDIR} = @{HOME}/.cache/discord @{DISCORD_CACHEDIR} = @{user_cache_dirs}/discord
@{exec_path} = @{DISCORD_LIBDIR}/Discord{,PTB} @{bin}/discord{,-ptb} @{exec_path} = @{DISCORD_LIBDIR}/Discord{,PTB} @{bin}/discord{,-ptb}
profile discord @{exec_path} { profile discord @{exec_path} {

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-kde
View file

@ -34,7 +34,7 @@ profile xdg-desktop-portal-kde @{exec_path} {
/etc/xdg/kwinrc r, /etc/xdg/kwinrc r,
owner @{HOME}/.Xauthority r, owner @{HOME}/.Xauthority r,
owner @{HOME}/.cache/*.kcache r, owner @{user_cache_dirs}/*.kcache r,
owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/icon-cache.kcache rw,

2
apparmor.d/profiles-a-f/anki
View file

@ -70,7 +70,7 @@ profile anki @{exec_path} {
owner @{user_share_dirs}/Anki{,2}/** rwk, owner @{user_share_dirs}/Anki{,2}/** rwk,
owner @{HOME}/ r, owner @{HOME}/ r,
owner @{HOME}/.cache/ rw, owner @{user_cache_dirs}/ rw,
# To remove the following error: # To remove the following error:
# Error initializing NSS with a persistent database # Error initializing NSS with a persistent database

6
apparmor.d/profiles-a-f/fuseiso
View file

@ -15,7 +15,7 @@ profile fuseiso @{exec_path} {
# Be able to mount ISO images # Be able to mount ISO images
mount fstype=fuse.fuseiso -> @{HOME}/*/, mount fstype=fuse.fuseiso -> @{HOME}/*/,
mount fstype=fuse.fuseiso -> @{HOME}/*/*/, mount fstype=fuse.fuseiso -> @{HOME}/*/*/,
mount fstype=fuse.fuseiso -> @{HOME}/.cache/**/, mount fstype=fuse.fuseiso -> @{user_cache_dirs}/**/,
@{exec_path} mr, @{exec_path} mr,
@ -24,7 +24,7 @@ profile fuseiso @{exec_path} {
# Where to mount ISO files # Where to mount ISO files
owner @{HOME}/*/ rw, owner @{HOME}/*/ rw,
owner @{HOME}/*/*/ rw, owner @{HOME}/*/*/ rw,
owner @{HOME}/.cache/**/ r, owner @{user_cache_dirs}/**/ r,
owner @{HOME}/.mtab.fuseiso rwk, owner @{HOME}/.mtab.fuseiso rwk,
owner @{HOME}/.mtab.fuseiso.new rw, owner @{HOME}/.mtab.fuseiso.new rw,
@ -45,7 +45,7 @@ profile fuseiso @{exec_path} {
mount fstype={fuse,fuse.fuseiso} -> @{HOME}/*/, mount fstype={fuse,fuse.fuseiso} -> @{HOME}/*/,
mount fstype={fuse,fuse.fuseiso} -> @{HOME}/*/*/, mount fstype={fuse,fuse.fuseiso} -> @{HOME}/*/*/,
mount fstype={fuse,fuse.fuseiso} -> @{HOME}/.cache/**/, mount fstype={fuse,fuse.fuseiso} -> @{user_cache_dirs}/**/,
@{bin}/fusermount{,3} mr, @{bin}/fusermount{,3} mr,

4
apparmor.d/profiles-a-f/fusermount
View file

@ -30,7 +30,7 @@ profile fusermount @{exec_path} {
# Be able to mount ISO images # Be able to mount ISO images
mount fstype={fuse,fuse.*} -> @{HOME}/*/, mount fstype={fuse,fuse.*} -> @{HOME}/*/,
mount fstype={fuse,fuse.*} -> @{HOME}/*/*/, mount fstype={fuse,fuse.*} -> @{HOME}/*/*/,
mount fstype={fuse,fuse.*} -> @{HOME}/.cache/**/, mount fstype={fuse,fuse.*} -> @{user_cache_dirs}/**/,
mount fstype={fuse,fuse.*} -> @{MOUNTS}/*/, mount fstype={fuse,fuse.*} -> @{MOUNTS}/*/,
mount fstype={fuse,fuse.*} -> @{MOUNTS}/*/*/, mount fstype={fuse,fuse.*} -> @{MOUNTS}/*/*/,
mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/*/, mount fstype={fuse,fuse.*} -> @{run}/user/@{uid}/*/,
@ -38,7 +38,7 @@ profile fusermount @{exec_path} {
umount @{HOME}/*/, umount @{HOME}/*/,
umount @{HOME}/*/*/, umount @{HOME}/*/*/,
umount @{HOME}/.cache/**/, umount @{user_cache_dirs}/**/,
umount @{MOUNTS}/*/, umount @{MOUNTS}/*/,
umount @{MOUNTS}/*/*/, umount @{MOUNTS}/*/*/,
umount /tmp/.mount_*/, umount /tmp/.mount_*/,

4
apparmor.d/profiles-g-l/gajim
View file

@ -72,8 +72,8 @@ profile gajim @{exec_path} {
owner @{user_cache_dirs}/gajim/ rw, owner @{user_cache_dirs}/gajim/ rw,
owner @{user_cache_dirs}/gajim/** rwk, owner @{user_cache_dirs}/gajim/** rwk,
owner @{HOME}/.cache/farstream/ rw, owner @{user_cache_dirs}/farstream/ rw,
owner @{HOME}/.cache/farstream/codecs.audio.x86_64.cache{,.tmp*} rw, owner @{user_cache_dirs}/farstream/codecs.audio.x86_64.cache{,.tmp*} rw,
owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mounts r, owner @{PROC}/@{pid}/mounts r,

6
apparmor.d/profiles-g-l/jami-gnome
View file

@ -24,9 +24,9 @@ profile jami-gnome @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
owner @{HOME}/.cache/ rw, owner @{user_cache_dirs}/ rw,
owner @{HOME}/.cache/jami-gnome/ rw, owner @{user_cache_dirs}/jami-gnome/ rw,
owner @{HOME}/.cache/jami-gnome/** rw, owner @{user_cache_dirs}/jami-gnome/** rw,
owner @{HOME}/.local/share/jami/ rw, owner @{HOME}/.local/share/jami/ rw,
owner @{HOME}/.local/share/jami/** rwkl -> @{HOME}/.local/share/jami/, owner @{HOME}/.local/share/jami/** rwkl -> @{HOME}/.local/share/jami/,

6
apparmor.d/profiles-g-l/jmtpfs
View file

@ -24,11 +24,11 @@ profile jmtpfs @{exec_path} {
owner @{HOME}/*/ r, owner @{HOME}/*/ r,
owner @{HOME}/*/*/ r, owner @{HOME}/*/*/ r,
owner @{HOME}/.cache/*/mtp{,-[0-9]*}/ rw, owner @{user_cache_dirs}/*/mtp{,-[0-9]*}/ rw,
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/, mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/,
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/*/, mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/*/,
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/.cache/*/*/, mount fstype={fuse,fuse.jmtpfs} -> @{user_cache_dirs}/*/*/,
/etc/magic r, /etc/magic r,
@ -49,7 +49,7 @@ profile jmtpfs @{exec_path} {
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/, mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/,
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/*/, mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/*/,
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/.cache/*/*/, mount fstype={fuse,fuse.jmtpfs} -> @{user_cache_dirs}/*/*/,
/etc/fuse.conf r, /etc/fuse.conf r,

6
apparmor.d/profiles-s-z/transmission-qt
View file

@ -40,9 +40,9 @@ profile transmission-qt @{exec_path} {
owner @{user_config_dirs}/transmission/ rw, owner @{user_config_dirs}/transmission/ rw,
owner @{user_config_dirs}/transmission/** rwk, owner @{user_config_dirs}/transmission/** rwk,
owner @{HOME}/.cache/ rw, owner @{user_cache_dirs}/ rw,
owner @{HOME}/.cache/transmission/ rw, owner @{user_cache_dirs}/transmission/ rw,
owner @{HOME}/.cache/transmission/** rwk, owner @{user_cache_dirs}/transmission/** rwk,
owner /tmp/tr_session_id_* rwk, owner /tmp/tr_session_id_* rwk,

2
apparmor.d/profiles-s-z/umount
View file

@ -34,7 +34,7 @@ profile umount @{exec_path} {
@{HOME}/ r, @{HOME}/ r,
@{HOME}/*/ r, @{HOME}/*/ r,
@{HOME}/*/*/ r, @{HOME}/*/*/ r,
@{HOME}/.cache/*/*/ r, @{user_cache_dirs}/*/*/ r,
@{MOUNTS}/*/ r, @{MOUNTS}/*/ r,
@{MOUNTS}/*/*/ r, @{MOUNTS}/*/*/ r,

6
apparmor.d/profiles-s-z/yt-dlp
View file

@ -37,9 +37,9 @@ profile yt-dlp @{exec_path} {
owner @{user_music_dirs}/{,**} rwk, owner @{user_music_dirs}/{,**} rwk,
owner @{user_videos_dirs}/{,**} rwk, owner @{user_videos_dirs}/{,**} rwk,
owner @{HOME}/.cache/ rw, owner @{user_cache_dirs}/ rw,
owner @{HOME}/.cache/yt-dlp/ rw, owner @{user_cache_dirs}/yt-dlp/ rw,
owner @{HOME}/.cache/yt-dlp/** rw, owner @{user_cache_dirs}/yt-dlp/** rw,
owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/fd/ r,