feat(profile): general update.
This commit is contained in:
parent
a99fbaa0be
commit
c7181ecadf
32 changed files with 152 additions and 158 deletions
|
|
@ -21,7 +21,7 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
|
|||
capability sys_nice,
|
||||
capability sys_ptrace,
|
||||
|
||||
ptrace (read) peer=unconfined,
|
||||
ptrace read peer=unconfined,
|
||||
|
||||
#aa:dbus own bus=system name=org.freedesktop.Accounts
|
||||
|
||||
|
|
@ -58,24 +58,23 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
|
|||
/etc/shells r,
|
||||
/etc/sysconfig/displaymanager r,
|
||||
|
||||
/var/log/wtmp r,
|
||||
|
||||
owner /var/lib/AccountsService/ r,
|
||||
owner /var/lib/AccountsService/** rw,
|
||||
|
||||
@{HOME}/ r,
|
||||
owner @{HOME}/.pam_environment r,
|
||||
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
owner @{PROC}/@{pid}/loginuid rw,
|
||||
@{PROC}/@{pids}/loginuid r,
|
||||
@{PROC}/@{pids}/cmdline r,
|
||||
owner @{tmp}/gnome-control-center-user-icon-@{rand6} rw,
|
||||
|
||||
@{PROC}/@{pid}/cmdline r,
|
||||
@{PROC}/@{pid}/loginuid r,
|
||||
@{PROC}/1/environ r,
|
||||
@{PROC}/cmdline r,
|
||||
@{PROC}/sys/kernel/osrelease r,
|
||||
|
||||
# wtmp.d ?
|
||||
/var/log/wtmp r,
|
||||
|
||||
owner @{tmp}/gnome-control-center-user-icon-@{rand6} rw,
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
owner @{PROC}/@{pid}/loginuid rw,
|
||||
|
||||
include if exists <local/accounts-daemon>
|
||||
}
|
||||
|
|
|
|||
|
|
@ -32,14 +32,14 @@ profile xdg-screensaver @{exec_path} {
|
|||
@{bin}/xset rPx,
|
||||
@{bin}/hostname rix,
|
||||
|
||||
/dev/dri/card@{int} rw,
|
||||
|
||||
owner @{HOME}/ r,
|
||||
owner @{HOME}/.Xauthority r,
|
||||
owner @{tmp}/xauth-@{int}-_[0-9] r,
|
||||
|
||||
owner @{run}/user/@{uid}/ r,
|
||||
|
||||
/dev/dri/card@{int} rw,
|
||||
|
||||
include if exists <local/xdg-screensaver>
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue