felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): replace old audio abstraction by the new stack.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-12 15:39:10 +00:00
parent b1235b0c52
commit e4c0f683d2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
62 changed files with 81 additions and 173 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/freedesktop/pipewire
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/pipewire
profile pipewire @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio2>
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.RealtimeKit1>
@ -53,7 +53,6 @@ profile pipewire @{exec_path} flags=(attach_disconnected) {
owner @{user_config_dirs}/pipewire/pipewire.conf r,
owner /tmp/librnnoise-@{int}.so rm,
owner @{run}/user/@{uid}/pipewire-@{int} rw,
owner @{run}/user/@{uid}/pipewire-@{int}.lock rwk,
owner @{run}/user/@{uid}/pipewire-@{int}-manager.lock rwk,

4
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/pipewire-media-session
profile pipewire-media-session @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.RealtimeKit1>
@ -53,8 +53,6 @@ profile pipewire-media-session @{exec_path} {
owner @{user_config_dirs}/pipewire/** rw,
owner @{user_config_dirs}/pulse/ rw,
owner @{run}/user/@{uid}/pipewire-@{int} rw,
@{run}/udev/data/c116:@{int} r, # for ALSA
@{run}/systemd/users/@{uid} r,

16
apparmor.d/groups/freedesktop/pipewire-pulse
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/pipewire-pulse
profile pipewire-pulse @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/nameservice-strict>
capability sys_ptrace,
@ -21,14 +21,15 @@ profile pipewire-pulse @{exec_path} flags=(attach_disconnected) {
@{bin}/pactl rix,
/usr/share/pipewire/{,**} r,
/etc/pipewire/{,**} r,
/var/lib/dbus/machine-id r,
/etc/machine-id r,
/etc/pipewire/client.conf r,
/etc/pipewire/pipewire-pulse.conf r,
/etc/pipewire/pipewire-pulse.conf.d/{,*} r,
/usr/share/pipewire/client.conf r,
/usr/share/pipewire/pipewire-pulse.conf r,
/ r,
/.flatpak-info r,
/var/lib/gdm{3,}/.config/pulse/cookie rwk,
@ -40,8 +41,5 @@ profile pipewire-pulse @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/virtual/dmi/id/board_vendor r,
@{sys}/devices/virtual/dmi/id/bios_vendor r,
/ r,
/.flatpak-info r,
include if exists <local/pipewire-pulse>
}

2
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -11,7 +11,7 @@ include <tunables/global>
@{exec_path} = @{bin}/pulseaudio
profile pulseaudio @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio2>
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/bus/org.bluez>