feat(profile): general update.
This commit is contained in:
parent
2e127ace4b
commit
ae71b323c2
29 changed files with 80 additions and 40 deletions
|
|
@ -44,7 +44,7 @@ profile smplayer @{exec_path} {
|
|||
@{bin}/pacmd rPx,
|
||||
@{bin}/smtube rPx,
|
||||
@{bin}/youtube-dl rPx,
|
||||
@{bin}/yt-dlp rPx,
|
||||
@{bin}/{y,}t-dlp rPx,
|
||||
|
||||
/usr/share/hwdata/pnp.ids r,
|
||||
|
||||
|
|
@ -87,5 +87,4 @@ profile smplayer @{exec_path} {
|
|||
include if exists <local/smplayer>
|
||||
}
|
||||
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
|
|
@ -11,8 +11,8 @@ include <tunables/global>
|
|||
profile top @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/wutmp>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/wutmp>
|
||||
|
||||
capability dac_read_search,
|
||||
capability kill,
|
||||
|
|
@ -36,16 +36,14 @@ profile top @{exec_path} flags=(attach_disconnected) {
|
|||
@{run}/systemd/sessions/ r,
|
||||
|
||||
@{sys}/devices/system/node/ r,
|
||||
@{sys}/devices/system/node/node@{int}/meminfo r,
|
||||
@{sys}/devices/system/node/node@{int}/cpumap r,
|
||||
@{sys}/devices/system/node/node@{int}/meminfo r,
|
||||
|
||||
@{PROC}/ r,
|
||||
@{PROC}/@{pids}/cgroup r,
|
||||
@{PROC}/@{pids}/cmdline r,
|
||||
@{PROC}/@{pids}/environ r,
|
||||
@{PROC}/@{pids}/oom_{,score_}adj r,
|
||||
@{PROC}/@{pids}/oom_{,score_}adj r,
|
||||
@{PROC}/@{pids}/oom_score r,
|
||||
@{PROC}/@{pids}/oom_score r,
|
||||
@{PROC}/@{pids}/stat r,
|
||||
@{PROC}/@{pids}/statm r,
|
||||
|
|
|
|||
|
|
@ -7,8 +7,9 @@ abi <abi/3.0>,
|
|||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{bin}/wl-{copy,paste}
|
||||
profile wl-copy @{exec_path} {
|
||||
profile wl-copy @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
|
|
|||
|
|
@ -21,14 +21,15 @@ profile yadifad @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
/etc/yadifa/yadifad.conf r,
|
||||
/etc/yadifa/* r,
|
||||
|
||||
/var/log/yadifa/{,**} rw,
|
||||
|
||||
owner /var/lib/yadifa/{,**} rw,
|
||||
owner /var/lib/yadifa/ rw,
|
||||
owner /var/lib/yadifa/** rwk,
|
||||
|
||||
owner @{run}/yadifa/{,*} rw,
|
||||
owner @{run}/yadifa/yadifad.pid rwk,
|
||||
owner @{run}/yadifa/ rw,
|
||||
owner @{run}/yadifa/** rwk,
|
||||
|
||||
include if exists <local/yadifad>
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue