felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use the @{pci} varibale when possible.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-08 17:46:05 +00:00
parent 013f1c5a83
commit bb947318a5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
83 changed files with 168 additions and 170 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/gdm
View file

@ -93,7 +93,7 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
@{run}/udev/tags/master-of-seat/ r,
@{sys}/devices/**/uevent r,
@{sys}/devices/pci[0-9]*/**/boot_vga r,
@{sys}/devices/@{pci}/boot_vga r,
@{sys}/devices/virtual/tty/tty[0-9]*/active r,
@{PROC}/@{pid}/cgroup r,

8
apparmor.d/groups/gnome/gnome-shell
View file

@ -380,10 +380,10 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/**/hwmon/{,name,temp*,fan*} r,
@{sys}/devices/**/hwmon/**/{,name,temp*,fan*} r,
@{sys}/devices/**/power_supply/{,**} r,
@{sys}/devices/pci[0-9]*/**/boot_vga r,
@{sys}/devices/pci[0-9]*/**/drm/ r,
@{sys}/devices/pci[0-9]*/**/input@{int}/{properties,name} r,
@{sys}/devices/pci[0-9]*/**/net/*/statistics/{rx_bytes,tx_bytes} r,
@{sys}/devices/@{pci}/boot_vga r,
@{sys}/devices/@{pci}/drm/ r,
@{sys}/devices/@{pci}/input@{int}/{properties,name} r,
@{sys}/devices/@{pci}/net/*/statistics/{rx_bytes,tx_bytes} r,
@{sys}/devices/platform/**/input@{int}/{properties,name} r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_cur_freq r,
@{sys}/devices/virtual/net/*/statistics/{rx_bytes,tx_bytes} r,

2
apparmor.d/groups/gnome/gsd-media-keys
View file

@ -117,7 +117,7 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/c189:@{int} r, # For /dev/bus/usb/**
@{sys}/devices/**/usb[0-9]/{,**} r,
@{sys}/devices/pci[0-9]*/**/sound/**/uevent r,
@{sys}/devices/@{pci}/sound/**/uevent r,
@{sys}/devices/platform/**/uevent r,
@{sys}/devices/virtual/**/uevent r,

14
apparmor.d/groups/gnome/gsd-power
View file

@ -70,13 +70,13 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
@{sys}/class/ r,
@{sys}/class/backlight/ r,
@{sys}/devices/pci[0-9]*/**/class r,
@{sys}/devices/pci[0-9]*/**/backlight/**/brightness rw,
@{sys}/devices/pci[0-9]*/**/backlight/**/{max_brightness,actual_brightness} r,
@{sys}/devices/pci[0-9]*/**/backlight/**/{uevent,type} r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/brightness rw,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/{max_brightness,actual_brightness} r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/{uevent,type,enabled} r,
@{sys}/devices/@{pci}/class r,
@{sys}/devices/@{pci}/backlight/**/brightness rw,
@{sys}/devices/@{pci}/backlight/**/{max_brightness,actual_brightness} r,
@{sys}/devices/@{pci}/backlight/**/{uevent,type} r,
@{sys}/devices/@{pci}/drm/card@{int}/**/brightness rw,
@{sys}/devices/@{pci}/drm/card@{int}/**/{max_brightness,actual_brightness} r,
@{sys}/devices/@{pci}/drm/card@{int}/**/{uevent,type,enabled} r,
@{sys}/devices/platform/**/leds/*backlight*/uevent r,
@{sys}/devices/platform/**/leds/*backlight*/max_brightness r,

2
apparmor.d/groups/gnome/nautilus
View file

@ -153,7 +153,7 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/**/hwmon@{int}/**/{,name,temp*,fan*} r,
@{sys}/devices/**/hwmon/{,name,temp*,fan*} r,
@{sys}/devices/**/hwmon/**/{,name,temp*,fan*} r,
@{sys}/devices/pci[0-9]*/**/revision r,
@{sys}/devices/@{pci}/revision r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_cur_freq r,
@{PROC}/@{pids}/net/wireless r,