felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): start using new abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-19 23:29:15 +00:00
parent 9f49052529
commit b7140c9b2b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
33 changed files with 44 additions and 196 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/groups/akonadi/akonadi_akonotes_resource
View file

@ -9,13 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_akonotes_resource
profile akonadi_akonotes_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,

6
apparmor.d/groups/akonadi/akonadi_archivemail_agent
View file

@ -9,21 +9,17 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_archivemail_agent
profile akonadi_archivemail_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/usr/share/mime/{,**} r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,

5
apparmor.d/groups/akonadi/akonadi_birthdays_resource
View file

@ -9,13 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_birthdays_resource
profile akonadi_birthdays_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,

5
apparmor.d/groups/akonadi/akonadi_contacts_resource
View file

@ -9,14 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_contacts_resource
profile akonadi_contacts_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,

9
apparmor.d/groups/akonadi/akonadi_control
View file

@ -9,15 +9,12 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_control
profile akonadi_control @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/fonts>
include <abstractions/mesa>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,

7
apparmor.d/groups/akonadi/akonadi_followupreminder_agent
View file

@ -9,15 +9,12 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_followupreminder_agent
profile akonadi_followupreminder_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
network inet dgram,
network inet6 dgram,

5
apparmor.d/groups/akonadi/akonadi_ical_resource
View file

@ -9,11 +9,8 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_ical_resource
profile akonadi_ical_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,

6
apparmor.d/groups/akonadi/akonadi_indexing_agent
View file

@ -9,14 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_indexing_agent
profile akonadi_indexing_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
@ -27,7 +24,6 @@ profile akonadi_indexing_agent @{exec_path} {
/usr/share/akonadi/plugins/serializer/*.desktop r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/mime/{,**} r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,

6
apparmor.d/groups/akonadi/akonadi_maildir_resource
View file

@ -9,21 +9,17 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_maildir_resource
profile akonadi_maildir_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/usr/share/mime/{,**} r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,

6
apparmor.d/groups/akonadi/akonadi_maildispatcher_agent
View file

@ -9,16 +9,13 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_maildispatcher_agent
profile akonadi_maildispatcher_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/qt5>
include <abstractions/ssl_certs>
include <abstractions/vulkan>
include <abstractions/X-strict>
network inet dgram,
@ -34,7 +31,6 @@ profile akonadi_maildispatcher_agent @{exec_path} {
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/akonadi_maildispatcher_agent.notifyrc r,
/usr/share/mime/{,**} r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,

9
apparmor.d/groups/akonadi/akonadi_mailfilter_agent
View file

@ -9,14 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_mailfilter_agent
profile akonadi_mailfilter_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
ptrace (read) peer=akonadi_archivemail_agent,
@ -28,7 +25,6 @@ profile akonadi_mailfilter_agent @{exec_path} {
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/mime/{,**} r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
@ -60,9 +56,6 @@ profile akonadi_mailfilter_agent @{exec_path} {
owner @{user_share_dirs}/akonadi/file_db_data/{,**} rw,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,

5
apparmor.d/groups/akonadi/akonadi_mailmerge_agent
View file

@ -9,13 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_mailmerge_agent
profile akonadi_mailmerge_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
network inet dgram,

5
apparmor.d/groups/akonadi/akonadi_migration_agent
View file

@ -9,14 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_migration_agent
profile akonadi_migration_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,

6
apparmor.d/groups/akonadi/akonadi_newmailnotifier_agent
View file

@ -9,21 +9,17 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_newmailnotifier_agent
profile akonadi_newmailnotifier_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/usr/share/mime/{,**} r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/akonadi_newmailnotifier_agent.notifyrc r,

6
apparmor.d/groups/akonadi/akonadi_notes_agent
View file

@ -9,14 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_notes_agent
profile akonadi_notes_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
network inet dgram,
@ -28,7 +25,6 @@ profile akonadi_notes_agent @{exec_path} {
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/mime/{,**} r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,

9
apparmor.d/groups/akonadi/akonadi_sendlater_agent
View file

@ -9,14 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_sendlater_agent
profile akonadi_sendlater_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
network inet dgram,
@ -28,7 +25,6 @@ profile akonadi_sendlater_agent @{exec_path} {
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/mime/{,**} r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
@ -44,9 +40,6 @@ profile akonadi_sendlater_agent @{exec_path} {
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/sys/kernel/core_pattern r,
/dev/tty r,

9
apparmor.d/groups/akonadi/akonadi_unifiedmailbox_agent
View file

@ -9,20 +9,16 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_unifiedmailbox_agent
profile akonadi_unifiedmailbox_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/mime/{,**} r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
@ -38,9 +34,6 @@ profile akonadi_unifiedmailbox_agent @{exec_path} {
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{PROC}/sys/kernel/core_pattern r,
/dev/tty r,