felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-06-23 11:25:17 +01:00
parent 2e127ace4b
commit ae71b323c2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 80 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/freedesktop/pipewire
View file

@ -56,7 +56,6 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/pipewire-@{int}.lock rwk,
owner @{run}/user/@{uid}/pulse/pid rw,
@{run}/udev/data/c81:@{int} r, # For video4linux
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/bus/ r,
@ -65,12 +64,11 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/@{pci}/usb@{int}/**/{idVendor,idProduct,removable,uevent} r,
@{sys}/devices/**/device:*/**/path r,
@{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name,bios_vendor,board_vendor} r,
@{sys}/module/apparmor/parameters/enabled r, # deny ?
@{sys}/module/apparmor/parameters/enabled r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
/dev/media@{int} rw,
/dev/video@{int} rw,
include if exists <local/pipewire>
}

2
apparmor.d/groups/freedesktop/xwayland
View file

@ -18,6 +18,8 @@ profile xwayland @{exec_path} flags=(attach_disconnected) {
signal (receive) set=(term hup) peer=kwin_wayland,
signal (receive) set=(term hup) peer=login,
unix type=stream addr=none peer=(label=gnome-shell, addr=none),
@{exec_path} mrix,
@{sh_path} rix,