felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

broader gdm

Browse source
This commit is contained in:
nobodysu 2022-09-05 04:14:08 +03:00 • committed by Alex
parent d6d7dacb9e
commit cd646ea899
30 changed files with 71 additions and 72 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/bus/dbus-daemon
View file

@ -54,8 +54,8 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
/usr/share/defaults/**.conf r,
# Extra rules for GDM
/var/lib/gdm/.local/share/icc/ r,
/var/lib/gdm/.local/share/icc/edid-*.icc r,
/var/lib/gdm{3,}/.local/share/icc/ r,
/var/lib/gdm{3,}/.local/share/icc/edid-*.icc r,
# Extra rules for Flatpak
/var/lib/flatpak/exports/share/dbus-1/{,**} r,

4
apparmor.d/groups/bus/dbus-run-session
View file

@ -26,8 +26,8 @@ profile dbus-run-session @{exec_path} {
/usr/share/gdm/greeter-dconf-defaults r,
/usr/share/dconf/profile/gdm r,
/var/lib/gdm/.config/dconf/user r,
/var/lib/gdm/.cache/dconf/ rw,
/var/lib/gdm{3,}/.config/dconf/user r,
/var/lib/gdm{3,}/.cache/dconf/ rw,
owner @{PROC}/@{pid}/fd/ r,

11
apparmor.d/groups/bus/ibus-dconf
View file

@ -2,7 +2,6 @@
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@ -26,12 +25,12 @@ profile ibus-dconf @{exec_path} flags=(attach_disconnected) {
owner @{user_config_dirs}/ibus/bus/{,@{hex}-unix-wayland-[0-9]*} r,
owner @{user_config_dirs}/ibus/bus/@{hex}-unix-[0-9]* r,
/var/lib/gdm/.config/ibus/bus/{,@{hex}-unix-wayland-[0-9]*} r,
/var/lib/gdm/.config/ibus/bus/@{hex}-unix-[0-9]* r,
/var/lib/gdm{3,}/.config/ibus/bus/{,@{hex}-unix-wayland-[0-9]*} r,
/var/lib/gdm{3,}/.config/ibus/bus/@{hex}-unix-[0-9]* r,
/var/lib/gdm/.cache/dconf/ w,
/var/lib/gdm/.cache/dconf/user rw,
/var/lib/gdm/.config/dconf/user rw,
/var/lib/gdm{3,}/.cache/dconf/ w,
/var/lib/gdm{3,}/.cache/dconf/user rw,
/var/lib/gdm{3,}/.config/dconf/user rw,
owner /dev/tty[0-9]* rw,

6
apparmor.d/groups/bus/ibus-engine-simple
View file

@ -19,10 +19,10 @@ profile ibus-engine-simple @{exec_path} flags=(attach_disconnected) {
/etc/machine-id r,
/var/lib/dbus/machine-id r,
/var/lib/gdm/.config/ibus/bus/{,@{hex}-unix-wayland-[0-9]} r,
/var/lib/gdm/.config/ibus/bus/@{hex}-unix-[0-9] r,
/var/lib/gdm{3,}/.config/ibus/bus/{,@{hex}-unix-wayland-[0-9]} r,
/var/lib/gdm{3,}/.config/ibus/bus/@{hex}-unix-[0-9] r,
owner /dev/tty[0-9]* rw,
include if exists <local/ibus-engine-simple>
}
}

4
apparmor.d/groups/bus/ibus-extension-gtk3
View file

@ -38,7 +38,7 @@ profile ibus-extension-gtk3 @{exec_path} {
owner @{run}/user/@{uid}/gdm/Xauthority r,
owner @{run}/user/@{uid}/wayland-[0-9] rw,
/var/lib/gdm/.config/dconf/user r,
/var/lib/gdm{3,}/.config/dconf/user r,
include if exists <local/ibus-extension-gtk3>
}
}

6
apparmor.d/groups/bus/ibus-portal
View file

@ -25,11 +25,11 @@ profile ibus-portal @{exec_path} flags=(attach_disconnected) {
/etc/machine-id r,
/var/lib/dbus/machine-id r,
/var/lib/gdm/.config/ibus/bus/ r,
/var/lib/gdm/.config/ibus/bus/@{hex}-unix-{,wayland-}[0-9] r,
/var/lib/gdm{3,}/.config/ibus/bus/ r,
/var/lib/gdm{3,}/.config/ibus/bus/@{hex}-unix-{,wayland-}[0-9] r,
owner /dev/tty[0-9]* rw,
/dev/null rw,
include if exists <local/ibus-portal>
}
}

4
apparmor.d/groups/bus/ibus-x11
View file

@ -23,7 +23,7 @@ profile ibus-x11 @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/var/lib/gdm/.config/ibus/bus/{,@{hex}-unix-wayland-[0-9]} r,
/var/lib/gdm{3,}/.config/ibus/bus/{,@{hex}-unix-wayland-[0-9]} r,
owner @{user_config_dirs}/ibus/bus/{,@{hex}-unix-wayland-[0-9]} r,
owner @{user_config_dirs}/ibus/bus/@{hex}-unix-[0-9] r,
@ -34,4 +34,4 @@ profile ibus-x11 @{exec_path} flags=(attach_disconnected) {
owner /dev/tty[0-9]* rw,
include if exists <local/ibus-x11>
}
}