felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use the @{pci} varibale when possible.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-08 17:46:05 +00:00
parent 013f1c5a83
commit bb947318a5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
83 changed files with 168 additions and 170 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/freedesktop/colord-sane
View file

@ -33,7 +33,7 @@ profile colord-sane @{exec_path} flags=(attach_disconnected) {
@{run}/systemd/journal/socket rw,
@{sys}/bus/scsi/devices/ r,
@{sys}/devices/pci[0-9]*/**/{vendor,model,type} r,
@{sys}/devices/@{pci}/{vendor,model,type} r,
@{PROC}/sys/dev/parport/parport[0-9]*/base-addr r,
@{PROC}/sys/dev/parport/parport[0-9]*/irq r,

6
apparmor.d/groups/freedesktop/iio-sensor-proxy
View file

@ -27,9 +27,9 @@ profile iio-sensor-proxy @{exec_path} {
@{sys}/class/ r,
@{sys}/class/input/ r,
@{sys}/devices/**/uevent r,
@{sys}/devices/pci[0-9]*/**/ r,
@{sys}/devices/pci[0-9]*/**/iio:*/** rw,
@{sys}/devices/pci[0-9]*/**/name r,
@{sys}/devices/@{pci}/ r,
@{sys}/devices/@{pci}/iio:*/** rw,
@{sys}/devices/@{pci}/name r,
/dev/iio:* r,

2
apparmor.d/groups/freedesktop/pipewire
View file

@ -69,7 +69,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
@{sys}/bus/media/devices/ r,
@{sys}/class/ r,
@{sys}/devices/**/device:*/**/path r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{idVendor,idProduct,removable,uevent} r,
@{sys}/devices/@{pci}/usb@{int}/**/{idVendor,idProduct,removable,uevent} r,
@{sys}/devices/virtual/dmi/id/{sys_vendor,product_version,product_name,bios_vendor,board_vendor} r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,

3
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -55,8 +55,7 @@ profile pipewire-media-session @{exec_path} {
@{run}/systemd/users/@{uid} r,
@{sys}/devices/**/sound/**/uevent r,
@{sys}/devices/pci[0-9]*/**/sound/**/pcm_class r,
@{sys}/devices/pci[0-9]*/**/video4linux/video[0-9]*/uevent r,
@{sys}/devices/@{pci}/sound/**/pcm_class r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node@{int}/meminfo r,

3
apparmor.d/groups/freedesktop/plymouthd
View file

@ -47,8 +47,7 @@ profile plymouthd @{exec_path} {
@{sys}/class/ r,
@{sys}/class/drm/ r,
@{sys}/class/graphics/ r,
@{sys}/devices/pci[0-9]*/**/{,uevent,vendor,device} r,
@{sys}/devices/pci[0-9]*/**/{,uevent} r,
@{sys}/devices/@{pci}/{,uevent,vendor,device} r,
@{sys}/devices/virtual/graphics/fbcon/uevent r,
@{sys}/devices/virtual/tty/console/active r,
@{sys}/firmware/acpi/bgrt/{,*} r,

8
apparmor.d/groups/freedesktop/xorg
View file

@ -98,10 +98,10 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/**/{uevent,name,id,config} r,
@{sys}/devices/**/hid r,
@{sys}/devices/**/power_supply/**/{type,online} r,
@{sys}/devices/pci[0-9]*/**/ r,
@{sys}/devices/pci[0-9]*/**/backlight/*/{,max_}brightness r,
@{sys}/devices/pci[0-9]*/**/backlight/*/brightness rw,
@{sys}/devices/pci[0-9]*/**/boot_vga r,
@{sys}/devices/@{pci}/ r,
@{sys}/devices/@{pci}/backlight/*/{,max_}brightness r,
@{sys}/devices/@{pci}/backlight/*/brightness rw,
@{sys}/devices/@{pci}/boot_vga r,
@{sys}/devices/platform/ r,
@{sys}/module/i915/{,**} r,