felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): start using new abstractions (2)

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-19 23:42:30 +00:00
parent b7140c9b2b
commit a79a3f3311
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
52 changed files with 68 additions and 313 deletions
Download patch file Download diff file Expand all files Collapse all files

15
apparmor.d/groups/gnome/gnome-control-center
View file

@ -15,15 +15,11 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
include <abstractions/dbus-session>
include <abstractions/dbus>
include <abstractions/dconf-write>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/gnome-strict>
include <abstractions/graphics>
include <abstractions/gstreamer>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/opencl-nvidia>
include <abstractions/p11-kit>
include <abstractions/vulkan>
network inet dgram,
network inet6 dgram,
@ -65,7 +61,6 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
/usr/share/backgrounds/{,**} r,
/usr/share/cups/data/testprint r,
/usr/share/desktop-base/**.{xml,png,svg} r,
/usr/share/egl/{,**} r,
/usr/share/firefox{,-esr}/browser/chrome/icons/{,**} r,
/usr/share/gnome-background-properties/{,**} r,
/usr/share/gnome-bluetooth{-*,}/{,**} r,
@ -73,7 +68,6 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
/usr/share/gnome-control-center/{,**} r,
/usr/share/gnome-shell/search-providers/{,**} r,
/usr/share/gnome/gnome-version.xml r,
/usr/share/libdrm/*.ids r,
/usr/share/language-tools/main-countries r,
/usr/share/pipewire/client.conf r,
/usr/share/thumbnailers/{,*} r,
@ -146,18 +140,17 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
owner @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/{,**} rw,
@{PROC}/cmdline r,
@{PROC}/zoneinfo r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/comm r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/loginuid r,
owner @{PROC}/@{pid}/maps r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/statm r,
owner @{PROC}/@{pid}/task/*/comm rw,
owner @{PROC}/@{pid}/loginuid r,
@{PROC}/cmdline r,
@{PROC}/zoneinfo r,
/dev/ r,
/dev/media@{int} r,