felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): gnome-shell//open: ensure gnome can start any program.

Browse source
This commit is contained in:
Alexandre Pujol 2024-06-23 11:26:15 +01:00
parent ae71b323c2
commit e8aa338d5e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 10 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/groups/gnome/gnome-shell
View file

@ -394,18 +394,21 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
include if exists <local/gnome-shell_shell> include if exists <local/gnome-shell_shell>
} }
profile open flags=(attach_disconnected,mediate_deleted) { profile open flags=(attach_disconnected,mediate_deleted,complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app-launcher-user>
unix receive type=stream, network inet stream,
network unix stream,
@{lib}/gio-launch-desktop mr,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop mr, @{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop mr,
@{lib}/gio-launch-desktop mr,
@{lib}/* PUx, @{lib}/** PUx,
/usr/games/* PUx, @{bin}/** PUx,
/usr/share/gnome-shell/extensions/ding@rastersoft.com/{,*/}ding.js rPx, /opt/*/** PUx,
/usr/share/*/** PUx,
/usr/local/bin/** PUx,
/usr/games/** PUx,
owner @{run}/user/@{uid}/gnome-shell-disable-extensions w, owner @{run}/user/@{uid}/gnome-shell-disable-extensions w,