felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): start using new abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-19 23:29:15 +00:00
parent 9f49052529
commit b7140c9b2b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
33 changed files with 44 additions and 196 deletions
Download patch file Download diff file Expand all files Collapse all files

13
apparmor.d/groups/freedesktop/xwayland
View file

@ -9,12 +9,8 @@ include <tunables/global>
@{exec_path} = @{bin}/Xwayland
profile xwayland @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/opencl>
include <abstractions/vulkan>
include <abstractions/graphics>
include <abstractions/X-strict>
signal (receive) set=(term hup) peer=gdm*,
@ -29,10 +25,8 @@ profile xwayland @{exec_path} flags=(attach_disconnected) {
@{bin}/{,ba,da}sh rix,
@{bin}/xkbcomp rPx,
/usr/share/egl/{,**} r,
/usr/share/fonts/{,**} r,
/usr/share/ghostscript/fonts/{,**} r,
/usr/share/libdrm/*.ids r,
owner /var/lib/gdm{3,}/.cache/mesa_shader_cache/index rw,
@ -41,10 +35,7 @@ profile xwayland @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/server-@{int}.xkm rw,
owner @{run}/user/@{uid}/xwayland-shared-@{rand6} rw,
@{sys}/bus/pci/devices/ r,
@{PROC}/@{pids}/cmdline r,
owner @{PROC}/@{pids}/comm r,
@{PROC}/@{pids}/cmdline r,
/dev/tty@{int} rw,
/dev/tty rw,