felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): unify udev char dynamic assignment ranges.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 12:46:27 +00:00
parent ceb4c582e1
commit e1a30cbf7d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
19 changed files with 23 additions and 86 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/freedesktop/iio-sensor-proxy
View file

@ -19,9 +19,7 @@ profile iio-sensor-proxy @{exec_path} {
@{run}/udev/data/+platform:* r,
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad
@{run}/udev/data/c13:@{int} r, # For /dev/input/*
@{run}/udev/data/c3[0-9]*:@{int} r, # For dynamic assignment range 384 to 511
@{run}/udev/data/c4[0-9]*:@{int} r,
@{run}/udev/data/c5[0-9]*:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/bus/ r,
@{sys}/bus/iio/devices/ r,

7
apparmor.d/groups/freedesktop/pipewire
View file

@ -58,12 +58,7 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/pipewire-@{int}-manager.lock rwk,
@{run}/udev/data/c81:@{int} r, # For video4linux
@{run}/udev/data/c23[4-9]:@{int} r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:@{int} r,
@{run}/udev/data/c25[0-4]:@{int} r,
@{run}/udev/data/c3[0-9]*:@{int} r, # For dynamic assignment range 384 to 511
@{run}/udev/data/c4[0-9]*:@{int} r,
@{run}/udev/data/c5[0-9]*:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/bus/ r,
@{sys}/bus/media/devices/ r,

4
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -102,9 +102,7 @@ profile pulseaudio @{exec_path} {
@{run}/udev/data/+pci:* r,
@{run}/udev/data/c116:@{int} r, # for ALSA
@{run}/udev/data/c23[4-9]:@{int} r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:@{int} r,
@{run}/udev/data/c25[0-4]:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/devices/**/sound/**/{uevent,pcm_class} r,
@{sys}/devices/virtual/dmi/id/{bios_vendor,board_vendor,sys_vendor} r,