feat(profile): minor update.
This commit is contained in:
parent
e774ad6578
commit
e5b1c0ca7d
6 changed files with 19 additions and 16 deletions
|
|
@ -23,6 +23,8 @@ profile gnome-calculator-search-provider @{exec_path} {
|
|||
|
||||
@{bin}/* rPUx,
|
||||
|
||||
owner @{user_cache_dirs}/gnome-calculator/* r,
|
||||
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
owner @{PROC}/@{pid}/cmdline r,
|
||||
|
||||
|
|
|
|||
|
|
@ -149,11 +149,6 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
|
|||
/dev/tty@{int} rw,
|
||||
owner /dev/pts/@{int} rw,
|
||||
|
||||
# Silencer,
|
||||
deny @{HOME}/ r,
|
||||
deny @{HOME}/**/ r,
|
||||
deny /tmp/ r,
|
||||
|
||||
profile gpg {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice-strict>
|
||||
|
|
|
|||
|
|
@ -6,7 +6,7 @@ abi <abi/4.0>,
|
|||
|
||||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{bin}/ghc-pkg{,-*}
|
||||
@{exec_path} = @{bin}/ghc-pkg{,-*} @{lib}/ghc-@{version}/bin/ghc-pkg-@{version}
|
||||
profile ghc-pkg @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
|
|
@ -26,6 +26,8 @@ profile ghc-pkg @{exec_path} {
|
|||
|
||||
@{sys}/devices/system/node/ r,
|
||||
|
||||
@{PROC}/@{pid}/task/@{tid}/comm rw,
|
||||
|
||||
include if exists <local/ghc-pkg>
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -46,6 +46,9 @@ profile gimp @{exec_path} {
|
|||
/etc/fstab r,
|
||||
/etc/gimp/{,**} r,
|
||||
|
||||
owner @{HOME}/@{XDG_SCREENSHOTS_DIR}/{,**} rw,
|
||||
owner @{HOME}/@{XDG_WALLPAPERS_DIR}/{,**} rw,
|
||||
|
||||
owner @{user_documents_dirs}/{,**} rw,
|
||||
owner @{user_pictures_dirs}/{,**} rw,
|
||||
owner @{user_work_dirs}/{,**} rw,
|
||||
|
|
|
|||
|
|
@ -8,7 +8,7 @@ abi <abi/4.0>,
|
|||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{bin}/gpartedbin @{lib}/{,gparted/}gpartedbin
|
||||
profile gpartedbin @{exec_path} {
|
||||
profile gpartedbin @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/desktop>
|
||||
|
|
|
|||
|
|
@ -44,14 +44,15 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
|
|||
@{sys}/devices/system/node/node@{int}/cpumap r,
|
||||
|
||||
@{PROC}/ r,
|
||||
@{PROC}/@{pids}/ r,
|
||||
@{PROC}/@{pids}/cmdline r,
|
||||
@{PROC}/@{pids}/fd/ r,
|
||||
@{PROC}/@{pids}/fdinfo/ r,
|
||||
@{PROC}/@{pids}/fdinfo/@{int} r,
|
||||
@{PROC}/@{pids}/stat r,
|
||||
@{PROC}/@{pid}/ r,
|
||||
@{PROC}/@{pid}/cmdline r,
|
||||
@{PROC}/@{pid}/fd/ r,
|
||||
@{PROC}/@{pid}/fdinfo/ r,
|
||||
@{PROC}/@{pid}/fdinfo/@{int} r,
|
||||
@{PROC}/@{pid}/stat r,
|
||||
@{PROC}/devices r,
|
||||
@{PROC}/driver/nvidia/capabilities/mig/{config,monitor} r,
|
||||
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
|
||||
|
||||
/dev/dri/ r,
|
||||
/dev/nvidia-caps/ rw,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue