felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-05-18 22:35:05 +01:00
parent 7d1380530a
commit c785b41451
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
26 changed files with 56 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/kde/baloo
View file

@ -25,6 +25,7 @@ profile baloo @{exec_path} {
@{lib}/{,kf6/}baloo_file_extractor rix,
/usr/share/poppler/{,**} r,
/usr/share/desktop-base/kf5-settings/baloofilerc r,
/etc/fstab r,
/etc/machine-id r,

2
apparmor.d/groups/kde/drkonqi-coredump-cleanup
View file

@ -14,7 +14,7 @@ profile drkonqi-coredump-cleanup @{exec_path} {
@{exec_path} mr,
@{user_cache_dirs}/kcrash-metadata/ r,
owner @{user_cache_dirs}/kcrash-metadata/plasmashell.*.ini w,
owner @{user_cache_dirs}/kcrash-metadata/plasmashell.@{hex32}.@{int4}.ini w,
include if exists <local/drkonqi-coredump-cleanup>
}

1
apparmor.d/groups/kde/gmenudbusmenuproxy
View file

@ -18,6 +18,7 @@ profile gmenudbusmenuproxy @{exec_path} {
@{exec_path} mr,
/etc/machine-id r,
/var/lib/dbus/machine-id r,
owner @{HOME}/.gtkrc-2.0 rw,
owner @{user_config_dirs}/gtk-{2,3}.0/#@{int} rw,

1
apparmor.d/groups/kde/kde-systemd-start-condition
View file

@ -16,6 +16,7 @@ profile kde-systemd-start-condition @{exec_path} {
/usr/share/desktop-base/kf{5,6}-settings/baloofilerc r,
owner @{user_config_dirs}/baloofilerc r,
owner @{user_config_dirs}/konquerorrc r,
owner @{user_config_dirs}/plasma-welcomerc r,
include if exists <local/kde-systemd-start-condition>

1
apparmor.d/groups/kde/kwin_wayland
View file

@ -32,6 +32,7 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
#aa:exec kscreenlocker_greet
/usr/share/color-schemes/*.colors r,
/usr/share/desktop-base/kf5-settings/{,**} r,
/usr/share/desktop-directories/*.directory r,
/usr/share/kglobalaccel/{,**} r,
/usr/share/knotifications{5,6}/ksmserver.notifyrc r,

10
apparmor.d/groups/kde/sddm
View file

@ -168,7 +168,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
/tmp/sddm-* rw,
/tmp/xauth_@{rand6} rwl -> /tmp/#@{int},
owner @{tmp}/*/{,s} rw,
owner @{tmp}/.@{rand6}/{,s} rw,
owner @{tmp}/#@{int} rw,
owner @{tmp}/sddm-auth* rw,
@ -209,15 +209,15 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
@{bin}/xauth mr,
owner @{HOME}/.Xauthority-c w,
owner @{HOME}/.Xauthority-l wl -> @{HOME}/.Xauthority-c,
owner @{HOME}/.Xauthority-c rw,
owner @{HOME}/.Xauthority-l rwl -> @{HOME}/.Xauthority-c,
owner @{HOME}/.Xauthority-n rw,
owner @{HOME}/.Xauthority rwl -> @{HOME}/.Xauthority-n,
owner @{user_share_dirs}/sddm/xorg-session.log w,
owner @{run}/sddm/\{@{uuid}\}-c w,
owner @{run}/sddm/\{@{uuid}\}-l wl -> @{run}/sddm/\{@{uuid}\}-c,
owner @{run}/sddm/\{@{uuid}\}-c rw,
owner @{run}/sddm/\{@{uuid}\}-l rwl -> @{run}/sddm/\{@{uuid}\}-c,
owner @{run}/sddm/\{@{uuid}\}-n rw,
owner @{run}/sddm/\{@{uuid}\} rwl -> @{run}/sddm/\{@{uuid}\}-n,

2
apparmor.d/groups/kde/wayland-session
View file

@ -24,5 +24,7 @@ profile wayland-session @{exec_path} {
owner @{user_share_dirs}/sddm/wayland-session.log rw,
/dev/tty rw,
include if exists <local/wayland-session>
}