felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profile): integration tests.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-30 19:42:59 +02:00
parent 71a8bf6be8
commit c80c82fda2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/groups/flatpak/flatpak
View file

@ -13,6 +13,7 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
include <abstractions/bus/org.a11y> include <abstractions/bus/org.a11y>
include <abstractions/bus/org.freedesktop.locale1>
include <abstractions/bus/org.gtk.vfs.MountTracker> include <abstractions/bus/org.gtk.vfs.MountTracker>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dconf-write> include <abstractions/dconf-write>
@ -121,15 +122,18 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain
capability dac_read_search, capability dac_read_search,
@{bin}/gpg{,2} mr, @{bin}/gpg{,2} mr,
@{bin}/gpgconf mr, @{bin}/gpgconf mr,
@{bin}/gpgsm mr, @{bin}/gpgsm mr,
@{bin}/gpg-agent rix,
@{HOME}/@{XDG_GPG_DIR}/*.conf r, @{HOME}/@{XDG_GPG_DIR}/*.conf r,
owner @{tmp}/ostree-gpg-@{rand6}/ rw, owner @{tmp}/ostree-gpg-@{rand6}/ rw,
owner @{tmp}/ostree-gpg-@{rand6}/** rwkl -> /tmp/ostree-gpg-@{rand6}/**, owner @{tmp}/ostree-gpg-@{rand6}/** rwkl -> /tmp/ostree-gpg-@{rand6}/**,
owner @{PROC}/@{pid}/fd/ r,
include if exists <local/flatpak_gpg> include if exists <local/flatpak_gpg>
} }

2
apparmor.d/groups/freedesktop/update-desktop-database
View file

@ -25,6 +25,8 @@ profile update-desktop-database @{exec_path} flags=(attach_disconnected) {
@{system_share_dirs}/applications/.mimeinfo.cache.* rw, @{system_share_dirs}/applications/.mimeinfo.cache.* rw,
@{system_share_dirs}/applications/mimeinfo.cache w, @{system_share_dirs}/applications/mimeinfo.cache w,
/usr/share/byobu/desktop/* r,
/var/lib/snapd/desktop/applications/.mimeinfo.cache.* rw, /var/lib/snapd/desktop/applications/.mimeinfo.cache.* rw,
/var/lib/snapd/desktop/applications/mimeinfo.cache w, /var/lib/snapd/desktop/applications/mimeinfo.cache w,

4
apparmor.d/profiles-g-l/landscape-sysinfo
View file

@ -27,8 +27,8 @@ profile landscape-sysinfo @{exec_path} {
@{bin}/who rix, @{bin}/who rix,
@{lib}/@{python_name}/landscape/{,**/}__pycache__/ w, @{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/ w,
@{lib}/@{python_name}/landscape/{,**/}__pycache__/**.pyc.@{u64} w, @{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/**.pyc.@{u64} w,
/var/log/landscape/{,**} rw, /var/log/landscape/{,**} rw,