felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): improve support for debian over gnome.

Browse source
This commit is contained in:
Alexandre Pujol 2023-11-13 22:14:54 +00:00
parent 31edd15e8a
commit d3084839d1
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 48 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/apt/apt-methods-mirror
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -10,6 +11,7 @@ include <tunables/global>
profile apt-methods-mirror @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
# The "_apt" user is created by the postinst script of the "apt" package. It's the owner of the
# dirs "/var/cache/apt/archives/partial/" and "/var/lib/apt/lists/partial/" . The "_apt" user is

17
apparmor.d/groups/gnome/gdm-xsession
View file

@ -24,27 +24,32 @@ profile gdm-xsession @{exec_path} {
@{bin}/gettext rix,
@{bin}/gettext.sh r,
@{bin}/gnome-session rix,
@{bin}/gsettings rPx,
@{bin}/id rix,
@{bin}/locale rix,
@{bin}/locale-check rix,
@{bin}/mktemp rix,
@{bin}/run-parts rix,
@{bin}/sed rix,
@{bin}/ssh-agent rix,
@{bin}/tail rix,
@{bin}/tr rix,
@{bin}/truncate rix,
@{bin}/tty rix,
@{bin}/which{,.debianutils} rix,
@{bin}/zsh rix,
@{etc_ro}/X11/xdm/Xsession rPx,
@{bin}/dbus-update-activation-environment rCx -> dbus,
@{bin}/dpkg-query rpx,
@{bin}/flatpak rPUx,
@{bin}/gpgconf rPx,
@{bin}/gsettings rPx,
@{bin}/im-launch rPx,
@{bin}/systemctl rPx -> child-systemctl,
@{bin}/xbrlapi rPx,
@{bin}/xhost rPx,
@{bin}/im-launch rPx,
@{bin}/gpgconf rPx,
@{lib}/gnome-session-binary rPx,
@{bin}/dpkg-query rpx,
@{bin}/xrdb rPx,
@{etc_ro}/X11/xdm/Xsession rPx,
@{lib}/gnome-session-binary rPx,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/im-config/data/{,*} r,