felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-08 18:01:39 +00:00
parent 52e52f06db
commit d81bce5559
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
32 changed files with 114 additions and 135 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/profiles-m-r/nvtop
View file

@ -50,7 +50,15 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
@{PROC}/@{pids}/stat r,
@{PROC}/driver/nvidia/capabilities/mig/{config,monitor} r,
/dev/char/509:@{int} w,
/dev/char/c23[4-9]:@{int} w, # For dynamic assignment range 234 to 254
/dev/char/c24[0-9]:@{int} w,
/dev/char/c25[0-4]:@{int} w,
/dev/char/c38[4-9]:@{int} w, # For dynamic assignment range 384 to 511
/dev/char/c39[0-9]:@{int} w,
/dev/char/c4[0-9][0-9]:@{int} w,
/dev/char/c50[0-9]:@{int} w,
/dev/char/c51[0-1]:@{int} w,
/dev/dri/ r,
/dev/nvidia-caps/{,nvidia-cap[0-9]*} rw,

3
apparmor.d/profiles-m-r/pass
View file

@ -70,6 +70,7 @@ profile pass @{exec_path} {
profile editor {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/fzf>
@{bin}/vim{,.*} mrix,
@ -79,8 +80,6 @@ profile pass @{exec_path} {
/usr/share/vim/{,**} r,
/tmp/ r,
owner @{HOME}/.fzf/plugin/ r,
owner @{HOME}/.fzf/plugin/fzf.vim r,
owner @{HOME}/.viminf{o,z}{,.tmp} rw,
owner @{user_password_store_dirs}/{,**/} r,

2
apparmor.d/profiles-m-r/pinentry-gnome3
View file

@ -12,5 +12,7 @@ profile pinentry-gnome3 @{exec_path} {
@{exec_path} mr,
owner @{PROC}/@{pid}/cmdline r,
include if exists <local/pinentry-gnome3>
}