From c80c82fda2d0ec0517ceddfb3977abd185b9062a Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Sun, 30 Mar 2025 19:42:59 +0200 Subject: [PATCH] fix(profile): integration tests. --- apparmor.d/groups/flatpak/flatpak | 10 +++++++--- apparmor.d/groups/freedesktop/update-desktop-database | 2 ++ apparmor.d/profiles-g-l/landscape-sysinfo | 4 ++-- 3 files changed, 11 insertions(+), 5 deletions(-) diff --git a/apparmor.d/groups/flatpak/flatpak b/apparmor.d/groups/flatpak/flatpak index 582a7ac49..5ae5f8e96 100644 --- a/apparmor.d/groups/flatpak/flatpak +++ b/apparmor.d/groups/flatpak/flatpak @@ -13,6 +13,7 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain include include include + include include include include @@ -121,15 +122,18 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain capability dac_read_search, - @{bin}/gpg{,2} mr, - @{bin}/gpgconf mr, - @{bin}/gpgsm mr, + @{bin}/gpg{,2} mr, + @{bin}/gpgconf mr, + @{bin}/gpgsm mr, + @{bin}/gpg-agent rix, @{HOME}/@{XDG_GPG_DIR}/*.conf r, owner @{tmp}/ostree-gpg-@{rand6}/ rw, owner @{tmp}/ostree-gpg-@{rand6}/** rwkl -> /tmp/ostree-gpg-@{rand6}/**, + owner @{PROC}/@{pid}/fd/ r, + include if exists } diff --git a/apparmor.d/groups/freedesktop/update-desktop-database b/apparmor.d/groups/freedesktop/update-desktop-database index ebf0ad6a3..939a132cb 100644 --- a/apparmor.d/groups/freedesktop/update-desktop-database +++ b/apparmor.d/groups/freedesktop/update-desktop-database @@ -25,6 +25,8 @@ profile update-desktop-database @{exec_path} flags=(attach_disconnected) { @{system_share_dirs}/applications/.mimeinfo.cache.* rw, @{system_share_dirs}/applications/mimeinfo.cache w, + /usr/share/byobu/desktop/* r, + /var/lib/snapd/desktop/applications/.mimeinfo.cache.* rw, /var/lib/snapd/desktop/applications/mimeinfo.cache w, diff --git a/apparmor.d/profiles-g-l/landscape-sysinfo b/apparmor.d/profiles-g-l/landscape-sysinfo index 9a3629c7f..6be10f48c 100644 --- a/apparmor.d/profiles-g-l/landscape-sysinfo +++ b/apparmor.d/profiles-g-l/landscape-sysinfo @@ -27,8 +27,8 @@ profile landscape-sysinfo @{exec_path} { @{bin}/who rix, - @{lib}/@{python_name}/landscape/{,**/}__pycache__/ w, - @{lib}/@{python_name}/landscape/{,**/}__pycache__/**.pyc.@{u64} w, + @{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/ w, + @{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/**.pyc.@{u64} w, /var/log/landscape/{,**} rw,