felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

New user login

Browse source
This commit is contained in:
nobodysu 2022-10-16 17:12:23 +03:00
parent 178e45c84b
commit ac7c42eefd
11 changed files with 48 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -8,7 +8,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/pipewire-media-session
profile pipewire-media-session @{exec_path} {
profile pipewire-media-session @{exec_path} flags=(complain ) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/dbus-session-strict>
@ -51,6 +51,7 @@ profile pipewire-media-session @{exec_path} {
owner @{HOME}/.local/state/ rw,
owner @{HOME}/.local/state/pipewire/{,**} rw,
owner @{user_config_dirs}/pipewire-media-session/ w,
owner @{user_config_dirs}/pipewire/ rw,
owner @{user_config_dirs}/pipewire/** rw,
owner @{user_config_dirs}/pulse/ rw,

3
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -9,7 +9,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/pulseaudio
profile pulseaudio @{exec_path} {
profile pulseaudio @{exec_path} flags=(complain ) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/consoles>
@ -136,6 +136,7 @@ profile pulseaudio @{exec_path} {
owner /var/lib/lightdm/.config/pulse/{,**} rw,
owner /var/lib/lightdm/.config/pulse/cookie k,
owner @{user_config_dirs}/ w,
owner @{user_config_dirs}/pulse/{,**} rw,
owner @{user_cache_dirs}/gstreamer-1.0/registry.*.bin r,

3
apparmor.d/groups/freedesktop/xdg-permission-store
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/xdg-permission-store
profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
profile xdg-permission-store @{exec_path} flags=(attach_disconnected complain) {
include <abstractions/base>
include <abstractions/dbus-session-strict>
@ -48,6 +48,7 @@ profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
@{HOME}/@{XDG_DATA_HOME}/flatpak/db/gnome rw,
owner @{user_share_dirs}/flatpak/ w,
owner @{user_share_dirs}/flatpak/db/ rw,
owner @{user_share_dirs}/flatpak/db/.goutputstream-* rw,
owner @{user_share_dirs}/flatpak/db/background rw,

12
apparmor.d/groups/freedesktop/xdg-user-dirs-update
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/xdg-user-dirs-update
profile xdg-user-dirs-update @{exec_path} {
profile xdg-user-dirs-update @{exec_path} flags=(complain ) {
include <abstractions/base>
@{exec_path} mr,
@ -26,6 +26,16 @@ profile xdg-user-dirs-update @{exec_path} {
/var/lib/gdm{3,}/@{XDG_TEMPLATES_DIR}/ rw,
/var/lib/gdm{3,}/@{XDG_VIDEOS_DIR}/ rw,
# new user; change to 'c'
owner @{HOME}/@{XDG_DESKTOP_DIR}/ w,
owner @{HOME}/@{XDG_DOCUMENTS_DIR}/ w,
owner @{HOME}/@{XDG_DOWNLOAD_DIR}/ w,
owner @{HOME}/@{XDG_MUSIC_DIR}/ w,
owner @{HOME}/@{XDG_PICTURES_DIR}/ w,
owner @{HOME}/@{XDG_PUBLICSHARE_DIR}/ w,
owner @{HOME}/@{XDG_TEMPLATES_DIR}/ w,
owner @{HOME}/@{XDG_VIDEOS_DIR}/ w,
owner @{user_config_dirs}/user-dirs.dirs r,
include if exists <local/xdg-user-dirs-update>