feat(profile): improve integration with opensuse.

2024-03-17 22:47:36 +00:00 · 2024-03-17 22:47:36 +00:00 · bf22e0770f
commit bf22e0770f
parent eb66feef62
14 changed files with 63 additions and 12 deletions
--- a/apparmor.d/groups/freedesktop/plymouthd
+++ b/apparmor.d/groups/freedesktop/plymouthd
@ -12,6 +12,8 @@ profile plymouthd @{exec_path} {
  include <abstractions/consoles>
  include <abstractions/dri-common>

+  capability checkpoint_restore,
+  capability net_admin,
  capability sys_admin,
  capability sys_chroot,
  capability sys_tty_config,
--- a/apparmor.d/groups/freedesktop/xrdb
+++ b/apparmor.d/groups/freedesktop/xrdb
@ -24,8 +24,7 @@ profile xrdb @{exec_path} {

  /usr/include/stdc-predef.h r,

-  /usr/etc/X11/xdm/Xresources r,
-
+  @{etc_ro}/X11/xdm/Xresources r,
  /etc/X11/Xresources/* r,

  # The location of the .Xresources file
--- a/apparmor.d/groups/freedesktop/xset
+++ b/apparmor.d/groups/freedesktop/xset
@ -12,6 +12,8 @@ profile xset @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>

+  capability dac_read_search,
+
  @{exec_path} mr,

  owner @{HOME}/.Xauthority r,