felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): improve ubuntu compatibility.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-13 22:04:12 +01:00
parent 0cbcbb29a4
commit d998b1dd6e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 109 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-s-z/spice-vdagent
View file

@ -12,16 +12,15 @@ profile spice-vdagent @{exec_path} {
include <abstractions/audio>
include <abstractions/dbus-session-strict>
include <abstractions/gtk>
include <abstractions/X-strict>
@{exec_path} mr,
/etc/machine-id r,
/etc/pipewire/client.conf r,
owner @{user_config_dirs}/user-dirs.dirs r,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[a-zA-z0-9]* rw,
@{run}/spice-vdagentd/spice-vdagent-sock rw,
@{run}/spice-vdagentd/spice-vdagent-sock rw,
@{sys}/devices/pci[0-9]*/**/{device,vendor} r,

3
apparmor.d/profiles-s-z/umount
View file

@ -11,6 +11,7 @@ include <tunables/global>
profile umount @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/disks-read>
include <abstractions/nameservice-strict>
capability chown,
@ -44,8 +45,6 @@ profile umount @{exec_path} flags=(complain) {
owner @{PROC}/@{pid}/mountinfo r,
@{sys}/devices/virtual/block/dm-[0-9]*/dm/name r,
owner @{run}/mount/ rw,
owner @{run}/mount/utab.lock wk,
@{run}/mount/utab{,.*} rw,