felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve general integration

Browse source 
See #407
This commit is contained in:
Alexandre Pujol 2024-07-12 20:08:58 +01:00
parent 872b8fc30a
commit d864f5c975
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 53 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/profiles-s-z/strawberry
View file

@ -8,10 +8,11 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/strawberry
profile strawberry @{exec_path} flags=(attach_disconnected) {
profile strawberry @{exec_path} flags=(attach_disconnected,mediate_deleted) {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/consoles>
include <abstractions/dconf-write>
include <abstractions/desktop>
include <abstractions/devices-usb>
include <abstractions/fontconfig-cache-read>

4
apparmor.d/profiles-s-z/virt-manager
View file

@ -84,8 +84,12 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/**/hwmon/**/{,name,temp*,fan*} r,
@{sys}/devices/virtual/drm/ttm/uevent r,
@{sys}/fs/cgroup/user.slice/cpu.max r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/cpu.max r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/session-@{int}.scope/cpu.max r,
@{PROC}/@{pids}/net/route r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,