felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Profile update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-03-27 14:25:29 +01:00
parent 20c3b0575c
commit a59387ac9e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 49 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

31
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-session-binary
profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/gtk>
@ -49,43 +50,43 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
/{usr/,}lib/evolution-data-server/evolution-alarm-notify rPx,
/{usr/,}lib/gsd-* rPx,
/usr/share/applications/org.gnome.Shell.desktop r,
/usr/share/applications//{,**} r,
/usr/share/gdm/greeter-dconf-defaults r,
/usr/share/gdm/greeter/applications/{,**} r,
/usr/share/gdm/greeter/autostart/{,*.desktop} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/glvnd/egl_vendor.d/ r,
/usr/share/gnome-session/hardware-compatibility r,
/usr/share/gnome-session/sessions/*.session r,
/usr/share/icons/{,**} r,
/usr/share/dconf/profile/gdm r,
/usr/share/mime/mime.cache r,
/usr/share/X11/xkb/{,**} r,
/etc/xdg/autostart/{,*.desktop} r,
/var/lib/gdm/.config/dconf/user r,
/var/lib/gdm/.cache/mesa_shader_cache/index rw,
/var/lib/gdm/.config/gnome-session/ rw,
/var/lib/gdm/.config/gnome-session/saved-session/ rw,
/var/lib/gdm/.local/share/applications/{,**} r,
/var/lib/flatpak/exports/share/applications/{,**} r,
owner @{user_cache_dirs}/mesa_shader_cache/index rw,
owner @{user_config_dirs}/autostart/{,*.desktop} r,
owner @{user_config_dirs}/gnome-session/ rw,
owner @{user_config_dirs}/gnome-session/saved-session/ rw,
owner @{user_config_dirs}/gtk-3.0/bookmarks rw,
owner @{user_config_dirs}/gtk-3.0/bookmarks.[0-9A-Z]* rw,
owner @{user_cache_dirs}/mesa_shader_cache/index rw,
# Users xdg
owner @{user_config_dirs}/mimeapps.list r,
owner @{user_config_dirs}/user-dirs.dirs r,
owner @{user_config_dirs}/user-dirs.locale r,
owner @{user_share_dirs}/applications/ r,
# Autostart
/etc/xdg/autostart/{,*.desktop} r,
/usr/share/gdm/greeter/autostart/{,*.desktop} r,
owner @{user_config_dirs}/autostart/{,*.desktop} r,
# Dconf
include <abstractions/dconf>
owner @{run}/user/@{uid}/dconf/ rw,
owner @{run}/user/@{uid}/dconf/user rw,
/usr/share/dconf/profile/gdm r,
/var/lib/gdm/.config/dconf/user r,
# Temp files
/tmp/.ICE-unix/[0-9]* rw,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* r,