felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): gnome-shell: allow some basic tools needed by some extensions.

Browse source 
fix #705
This commit is contained in:
Alexandre Pujol 2025-06-16 22:38:37 +02:00
parent 5ae1cc854d
commit b88cf164ec
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

16
apparmor.d/groups/gnome/gnome-shell
View file

@ -170,6 +170,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
@{bin}/gjs-console rPx, @{bin}/gjs-console rPx,
@{bin}/glib-compile-schemas rPx, @{bin}/glib-compile-schemas rPx,
@{bin}/ibus-daemon rPx, @{bin}/ibus-daemon rPx,
@{bin}/sensors rPx,
@{bin}/tecla rPx, @{bin}/tecla rPx,
@{bin}/Xwayland rPx, @{bin}/Xwayland rPx,
@{lib}/{,NetworkManager/}nm-openvpn-auth-dialog rPx, @{lib}/{,NetworkManager/}nm-openvpn-auth-dialog rPx,
@ -386,8 +387,10 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
@{sh_path} mr, @{sh_path} mr,
@{bin}/pmap rix, @{bin}/cat rix,
@{bin}/grep rix, @{bin}/grep rix,
@{bin}/kmod rPx -> gnome-shell//lsmod,
@{bin}/pmap rix,
@{sys}/devices/system/node/ r, @{sys}/devices/system/node/ r,
@ -400,6 +403,15 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
include if exists <local/gnome-shell_shell> include if exists <local/gnome-shell_shell>
} }
profile lsmod flags=(attach_disconnected,mediate_deleted) {
include <abstractions/base>
include <abstractions/app/kmod>
@{sys}/module/{,**} r,
include if exists <local/gnome-shell_lsmod>
}
profile pkexec { profile pkexec {
include <abstractions/base> include <abstractions/base>
include <abstractions/app/pkexec> include <abstractions/app/pkexec>