felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Tunables polishing (#281)

Browse source 
* adjust xorg display number

* remove wildcard from python version

* python wildcard #2

* unconventional tails

* Delete apparmor.d/groups/apps/android-studio

---------

Co-authored-by: nobody43 <nobody43@users.noreply.github.com>
This commit is contained in:
nobody43 2024-01-25 12:44:47 +00:00 • committed by GitHub
parent 765fa1bdb8
commit b376e9fade
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
69 changed files with 88 additions and 88 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-g-l/ganyremote
View file

@ -23,7 +23,7 @@ profile ganyremote @{exec_path} {
network inet6 stream,
@{exec_path} r,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,

2
apparmor.d/profiles-g-l/gpo
View file

@ -22,7 +22,7 @@ profile gpo @{exec_path} {
network inet6 stream,
@{exec_path} r,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,

2
apparmor.d/profiles-g-l/gpodder
View file

@ -26,7 +26,7 @@ profile gpodder @{exec_path} {
network netlink raw,
@{exec_path} r,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,

2
apparmor.d/profiles-g-l/gpodder-migrate2tres
View file

@ -12,7 +12,7 @@ profile gpodder-migrate2tres @{exec_path} {
include <abstractions/python>
@{exec_path} r,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
@{bin}/ r,
@{bin}/{,ba,da}sh rix,

2
apparmor.d/profiles-g-l/hardinfo
View file

@ -40,7 +40,7 @@ profile hardinfo @{exec_path} {
@{bin}/make rix,
@{bin}/perl rix,
@{bin}/python2.[0-9]* rix,
@{bin}/python3.[0-9]* rix,
@{bin}/python3.@{int} rix,
@{bin}/route rix,
@{bin}/ruby[0-9].@{int} rix,
@{bin}/strace rix,

2
apparmor.d/profiles-g-l/hypnotix
View file

@ -36,7 +36,7 @@ profile hypnotix @{exec_path} {
network netlink raw,
@{exec_path} rix,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
@{bin}/{,ba,da}sh rix,
@{bin}/ldconfig rix,

2
apparmor.d/profiles-g-l/install-printerdriver
View file

@ -15,7 +15,7 @@ profile install-printerdriver @{exec_path} flags=(complain) {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
/usr/share/system-config-printer/{,**} r,

2
apparmor.d/profiles-g-l/iotop
View file

@ -19,7 +19,7 @@ profile iotop @{exec_path} {
capability sys_nice,
@{exec_path} r,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
@{bin}/file rix,

2
apparmor.d/profiles-g-l/kconfig-hardened-check
View file

@ -12,7 +12,7 @@ profile kconfig-hardened-check @{exec_path} {
include <abstractions/python>
@{exec_path} r,
@{bin}/python3.[0-9]* r,
@{bin}/python3.@{int} r,
@{bin}/ r,

4
apparmor.d/profiles-g-l/labwc
View file

@ -60,9 +60,9 @@ profile labwc @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/@{pid}/fd/ r,
owner /tmp/.X[0-9]*-lock rw,
owner /tmp/.X@{int}-lock rw,
owner /tmp/.X11-unix/ rw,
owner /tmp/.X11-unix/X[0-9]* rw,
owner /tmp/.X11-unix/X@{int} rw,
include if exists <local/labwc>
}