felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve kde integration.

Browse source 
see #484
This commit is contained in:
Alexandre Pujol 2024-09-13 20:41:22 +01:00
parent 4ccf2156de
commit b03b9b05eb
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
12 changed files with 81 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

37
apparmor.d/groups/freedesktop/xorg
View file

@ -87,6 +87,25 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
owner @{tmp}/server-* rwk,
owner @{tmp}/serverauth.* r,
@{run}/udev/data/+acpi:* r, # for acpi
@{run}/udev/data/+dmi* r, # for motherboard info
@{run}/udev/data/+drm:card@{int}-* r, # For screen outputs
@{run}/udev/data/+hid:* r, # for HID-Compliant Keyboard
@{run}/udev/data/+i2c:* r,
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad
@{run}/udev/data/+pci:* r, # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
@{run}/udev/data/+platform:* r, # for ?
@{run}/udev/data/+serio:* r, # for touchpad?
@{run}/udev/data/+sound:card@{int} r, # for sound card
@{run}/udev/data/+usb* r, # for USB mouse and keyboard
@{run}/udev/data/c4:@{int} r, # for /dev/tty[0-9]*
@{run}/udev/data/c5:@{int} r, # for /dev/tty, /dev/console, /dev/ptmx
@{run}/udev/data/c10:@{int} r, # for non-serial mice, misc features
@{run}/udev/data/c13:@{int} r, # for /dev/input/*
@{run}/udev/data/c189:@{int} r, # for /dev/bus/usb/**
@{run}/udev/data/c226:@{int} r, # for /dev/dri/card*
@{sys}/bus/ r,
@{sys}/bus/pci/devices/ r,
@{sys}/class/ r,
@ -103,23 +122,6 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/platform/ r,
@{sys}/module/i915/{,**} r,
@{run}/udev/data/+acpi:* r, # for acpi
@{run}/udev/data/+dmi* r, # for motherboard info
@{run}/udev/data/+drm:card@{int}-* r, # For screen outputs
@{run}/udev/data/+hid:* r, # for HID-Compliant Keyboard
@{run}/udev/data/+i2c:* r,
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad
@{run}/udev/data/+pci:* r, # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
@{run}/udev/data/+platform:* r, # for ?
@{run}/udev/data/+serio:* r, # for touchpad?
@{run}/udev/data/+usb* r, # for USB mouse and keyboard
@{run}/udev/data/c4:@{int} r, # for /dev/tty[0-9]*
@{run}/udev/data/c5:@{int} r, # for /dev/tty, /dev/console, /dev/ptmx
@{run}/udev/data/c10:@{int} r, # for non-serial mice, misc features
@{run}/udev/data/c13:@{int} r, # for /dev/input/*
@{run}/udev/data/c189:@{int} r, # for /dev/bus/usb/**
@{run}/udev/data/c226:@{int} r, # for /dev/dri/card*
@{PROC}/@{pids}/cmdline r,
@{PROC}/cmdline r,
@{PROC}/ioports r,
@ -127,6 +129,7 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
/dev/fb@{int} rw,
/dev/input/event@{int} rw,
/dev/input/mouse@{int} rw,
/dev/shm/#@{int} rw,
/dev/shm/shmfd-* rw,
/dev/tty rw,