felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve general integration

Browse source 
See #407
This commit is contained in:
Alexandre Pujol 2024-07-12 20:08:58 +01:00
parent 872b8fc30a
commit d864f5c975
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 53 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/groups/freedesktop/xdg-user-dir
View file

@ -9,11 +9,12 @@ include <tunables/global>
@{exec_path} = @{bin}/xdg-user-dir
profile xdg-user-dir @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
@{exec_path} mr,
@{sh_path} rix,
@{bin}/env rix,
@{sh_path} rix,
@{bin}/env rix,
owner @{user_config_dirs}/user-dirs.dirs r,

2
apparmor.d/groups/freedesktop/xhost
View file

@ -8,7 +8,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/xhost
profile xhost @{exec_path} {
profile xhost @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/X-strict>

1
apparmor.d/groups/systemd/systemd-generator-fstab
View file

@ -13,6 +13,7 @@ profile systemd-generator-fstab @{exec_path} {
capability dac_override,
capability dac_read_search,
capability mknod,
@{exec_path} mr,

2
apparmor.d/groups/systemd/systemd-generator-user-autostart
View file

@ -16,6 +16,8 @@ profile systemd-generator-user-autostart @{exec_path} {
@{exec_path} mr,
@{system_share_dirs}/applications/*.desktop r,
@{etc_ro}/xdg/autostart/{,*.desktop} r,
owner @{user_config_dirs}/autostart/{,*.desktop} r,

3
apparmor.d/groups/systemd/systemd-machined
View file

@ -49,6 +49,9 @@ profile systemd-machined @{exec_path} {
@{PROC}/pressure/io r,
@{PROC}/pressure/memory r,
/dev/ptmx rw,
/dev/pts/@{int} rw,
include if exists <local/systemd-machined>
}