Some rules addition for gnome support.

This commit is contained in:
Alexandre Pujol 2021-04-02 10:11:59 +01:00
parent e57dd4e3a7
commit e4266d9cda
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 26 additions and 3 deletions

View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2018-2021 Mikhail Morfikov
# 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -26,20 +27,27 @@ profile at-spi-bus-launcher @{exec_path} {
/{usr/,}bin/dbus-daemon rPUx,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/cgroup r,
owner @{HOME}/.Xauthority r,
/var/lib/lightdm/.Xauthority r,
@{run}/user/[0-9]*/gdm/Xauthority r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
/usr/share/dconf/profile/gdm r,
/var/lib/gdm/.config/dconf/user r,
# file_inherit
owner /dev/tty[0-9]* rw,
owner @{HOME}/.xsession-errors w,
/var/log/lightdm/seat[0-9]*-greeter.log w,
/usr/share/gdm/greeter-dconf-defaults r,
@{PROC}/1/cgroup r,
include if exists <local/at-spi-bus-launcher>
}