felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): replace old audio abstraction by the new stack.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-12 15:39:10 +00:00
parent b1235b0c52
commit e4c0f683d2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
62 changed files with 81 additions and 173 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-m-r/minitube
View file

@ -17,7 +17,7 @@ profile minitube @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/nameservice-strict>
include <abstractions/qt5-settings-write>
include <abstractions/qt5-compose-cache-write>

2
apparmor.d/profiles-m-r/mpd
View file

@ -11,7 +11,7 @@ include <tunables/global>
@{exec_path} = @{bin}/mpd
profile mpd @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/nameservice-strict>
network inet dgram,

5
apparmor.d/profiles-m-r/mpv
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/mpv
profile mpv @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/consoles>
include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>
@ -39,11 +39,8 @@ profile mpv @{exec_path} {
@{bin}/youtube-dl rPx,
@{bin}/yt-dlp rPx,
/usr/share/pipewire/client-rt.conf r,
/etc/libva.conf r,
/etc/mpv/* r,
/etc/pipewire/client-rt.conf.d/{,**} r,
/etc/samba/smb.conf r,
/etc/machine-id r,

4
apparmor.d/profiles-m-r/pacmd
View file

@ -10,8 +10,8 @@ include <tunables/global>
@{exec_path} = @{bin}/pacmd
profile pacmd @{exec_path} {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/consoles>
include <abstractions/audio>
#capability sys_ptrace,
@ -24,8 +24,6 @@ profile pacmd @{exec_path} {
/app/lib/libzypak*.so* mr,
owner @{run}/user/@{uid}/pulse rw,
owner @{PROC}/@{pids}/stat r,
deny @{user_share_dirs}/gvfs-metadata/* r,

4
apparmor.d/profiles-m-r/pactl
View file

@ -10,7 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/pactl
profile pactl @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/consoles>
@{exec_path} mr,
@ -24,8 +24,6 @@ profile pactl @{exec_path} {
owner @{HOME}/.Xauthority r,
owner @{user_config_dirs}/pulse/ rw,
# file_inherit
owner /dev/tty@{int} rw,
owner @{HOME}/.xsession-errors w,

2
apparmor.d/profiles-m-r/psi
View file

@ -82,7 +82,7 @@ profile psi @{exec_path} {
profile aplay {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
@{bin}/aplay mr,
#@{bin}/pulseaudio rPUx,

2
apparmor.d/profiles-m-r/psi-plus
View file

@ -81,7 +81,7 @@ profile psi-plus @{exec_path} {
profile aplay {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
@{bin}/aplay mr,
#@{bin}/pulseaudio rPUx,

3
apparmor.d/profiles-m-r/quiterss
View file

@ -25,8 +25,7 @@ profile quiterss @{exec_path} {
include <abstractions/openssl>
include <abstractions/ssl_certs>
include <abstractions/gstreamer>
# This one is needed when you want to receive sound notifications
include <abstractions/audio>
include <abstractions/audio-client>
network inet dgram,
network inet6 dgram,

13
apparmor.d/profiles-m-r/rustdesk
View file

@ -8,7 +8,7 @@ include <tunables/global>
@{exec_path} = @{bin}/rustdesk
profile rustdesk @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/audio-client>
include <abstractions/bus-accessibility>
include <abstractions/bus-session>
include <abstractions/bus/org.a11y>
@ -58,17 +58,6 @@ profile rustdesk @{exec_path} {
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/cmdline r,
# pulse
/dev/shm/ r,
/etc/pulse/client.conf r,
/etc/pulse/client.conf.d/{,*} r,
owner @{run}/user/@{uid}/pulse/ r,
owner @{run}/user/@{uid}/pulse/native rw,
owner @{user_config_dirs}/pulse/ rw,
owner @{user_config_dirs}/pulse/cookie rwk,
owner @{user_config_dirs}/pulse/@{md5}-runtime{,.tmp} rw,
owner /tmp/pulse-*/ rw,
profile sudo {
include <abstractions/base>
include <abstractions/nameservice-strict>