felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-03 16:57:50 +00:00
parent 1edf507abf
commit dd1d9107e8
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 41 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/groups/gnome/gnome-extension-ding
View file

@ -91,6 +91,9 @@ profile gnome-extension-ding @{exec_path} {
/usr/share/thumbnailers/{,*.thumbnailer} r,
/usr/share/X11/{,**} r,
/etc/pulse/client.conf r,
/etc/pulse/client.conf.d/{,*} r,
/var/lib/snapd/desktop/icons/{,**} r,
owner @{HOME}/@{XDG_TEMPLATES_DIR}/ r,
@ -98,6 +101,13 @@ profile gnome-extension-ding @{exec_path} {
owner @{user_share_dirs}/nautilus/scripts/ r,
owner @{user_config_dirs}/pulse/cookie rk,
/dev/shm/ r,
owner @{run}/user/@{uid}/pulse/ r,
owner @{run}/user/@{uid}/pulse/native rw,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/stat r,

3
apparmor.d/groups/gnome/gnome-shell
View file

@ -58,7 +58,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
unix (send,receive) type=stream addr=none peer=(label=gnome-extension-ding),
unix (send,receive) type=stream addr=none peer=(label=xkbcomp),
unix (send,receive) type=stream addr=none peer=(label=xwayland),
unix (send, receive, connect) type=stream peer=(addr="@/var/lib/gdm{3,}/.cache/ibus/dbus-????????", label=ibus-daemon),
unix (send,receive, connect) type=stream peer=(addr="@/var/lib/gdm{3,}/.cache/ibus/dbus-????????", label=ibus-daemon),
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
@ -584,6 +584,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
owner /dev/shm/.org.chromium.Chromium.* rw,
owner /dev/shm/wayland.mozilla.ipc.@{int} rw,
/tmp/dbus-@{rand8} rw,
owner /tmp/.X[0-9]-lock rw,
owner /tmp/[0-9A-Z]*.shell-extension.zip rw,
owner /tmp/gdkpixbuf-xpm-tmp.[0-9A-Z]* rw,

5
apparmor.d/groups/gnome/gnome-terminal-server
View file

@ -57,8 +57,10 @@ profile gnome-terminal-server @{exec_path} {
/etc/pulse/client.conf.d/{,**} r,
/etc/shells r,
owner @{user_cache_dirs}/event-sound-cache.tdb.@{md5}.@{multiarch} rwk,
owner @{user_config_dirs}/*xdg-terminals.list* rw,
owner @{user_config_dirs}/pulse/cookie r,
owner @{user_config_dirs}/pulse/cookie rk,
owner @{run}/user/@{uid}/pulse/ r,
owner @{run}/user/@{uid}/pulse/native rw,
@ -67,6 +69,7 @@ profile gnome-terminal-server @{exec_path} {
@{PROC}/@{pids}/cgroup r,
/dev/ptmx rw,
/dev/shm/ r,
include if exists <local/gnome-terminal-server>
}