felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): replace old audio abstraction by the new stack.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-12 15:39:10 +00:00
parent b1235b0c52
commit e4c0f683d2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
62 changed files with 81 additions and 173 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-a-f/amixer
View file

@ -10,22 +10,16 @@ include <tunables/global>
@{exec_path} = @{bin}/amixer
profile amixer @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/nameservice-strict>
@{exec_path} mr,
/usr/share/pipewire/client.conf r,
/usr/share/pipewire/client-rt.conf r,
/etc/machine-id r,
/etc/pipewire/client-rt.conf.d/{,*} r,
/var/lib/dbus/machine-id r,
owner @{HOME}/.Xauthority r,
owner @{user_config_dirs}/pulse/ r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
owner /dev/tty@{int} rw,

4
apparmor.d/profiles-a-f/aplay
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/aplay
profile aplay @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
@{exec_path} mr,
@ -19,7 +19,5 @@ profile aplay @{exec_path} flags=(complain) {
owner @{HOME}/.Xauthority r,
owner @{user_config_dirs}/pulse/ r,
include if exists <local/aplay>
}

2
apparmor.d/profiles-a-f/blueman
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/blueman-*
profile blueman @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/dconf-write>
include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>

3
apparmor.d/profiles-a-f/claws-mail
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/claws-mail
profile claws-mail @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/enchant>
include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>
@ -35,7 +35,6 @@ profile claws-mail @{exec_path} flags=(complain) {
@{bin}/geany rPUx,
/usr/share/publicsuffix/*.dafsa r,
/usr/share/sounds/freedesktop/stereo/*.oga r,
/etc/fstab r,
/etc/machine-id r,

2
apparmor.d/profiles-a-f/dring
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{lib}/ring/dring
profile dring @{exec_path} {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/nameservice-strict>
include <abstractions/audio>
include <abstractions/video>
network inet dgram,

2
apparmor.d/profiles-a-f/ffmpeg
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/ffmpeg
profile ffmpeg @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/consoles>
include <abstractions/dri-common>
include <abstractions/nameservice-strict>

2
apparmor.d/profiles-a-f/ffplay
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/ffplay
profile ffplay @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/freedesktop.org>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>