felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): unify udev char dynamic assignment ranges.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 12:46:27 +00:00
parent ceb4c582e1
commit e1a30cbf7d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
19 changed files with 23 additions and 86 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/gnome/gnome-control-center
View file

@ -130,12 +130,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad
@{run}/udev/data/+pci:* r,
@{run}/udev/data/c13:@{int} r, # for /dev/input/*
@{run}/udev/data/c23[4-9]:@{int} r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:@{int} r,
@{run}/udev/data/c25[0-4]:@{int} r,
@{run}/udev/data/c3[0-9]*:@{int} r, # For dynamic assignment range 384 to 511
@{run}/udev/data/c4[0-9]*:@{int} r,
@{run}/udev/data/c5[0-9]*:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{run}/udev/data/n@{int} r,
@{sys}/bus/ r,

4
apparmor.d/groups/gnome/org.gnome.NautilusPreviewer
View file

@ -41,9 +41,7 @@ profile org.gnome.NautilusPreviewer @{exec_path} {
owner @{user_config_dirs}/pulse/cookie rk,
@{run}/udev/data/c3[0-9]*:@{int} r, # For dynamic assignment range 384 to 511
@{run}/udev/data/c4[0-9]*:@{int} r,
@{run}/udev/data/c5[0-9]*:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/devices/@{pci}/revision r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/session.slice/dbus.service/memory.* r,

7
apparmor.d/groups/gnome/tracker-extract
View file

@ -85,12 +85,7 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
@{run}/blkid/blkid.tab r,
@{run}/udev/data/c23[4-9]:@{int} r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:@{int} r,
@{run}/udev/data/c25[0-4]:@{int} r,
@{run}/udev/data/c3[0-9]*:@{int} r, # For dynamic assignment range 384 to 511
@{run}/udev/data/c4[0-9]*:@{int} r,
@{run}/udev/data/c5[0-9]*:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{run}/mount/utab r,