felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(abstractions, tunables): move vim modeline

Browse source 
Move vim syntax comment to the end of the file, separated by newline, as requested in #380.
This commit is contained in:
REmerald 2024-06-15 16:52:31 +03:00 • committed by Alexandre Pujol
parent 6b5475c7f2
commit eb480672f3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
134 changed files with 281 additions and 148 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/abstractions/common/app
View file

@ -1,7 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
# LOGPROF-SUGGEST: no
# Common rules for applications sandboxed using bwrap.
@ -130,4 +129,6 @@
/dev/pts/ptmx rw,
/dev/tty rw,
include if exists <abstractions/common/app.d>
include if exists <abstractions/common/app.d>
# vim:syntax=apparmor

5
apparmor.d/abstractions/common/apt
View file

@ -2,7 +2,6 @@
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
/usr/share/dpkg/cputable r,
/usr/share/dpkg/tupletable r,
@ -29,4 +28,6 @@
owner @{tmp}/#@{int} rw,
owner @{tmp}/clearsigned.message.* rw,
include if exists <abstractions/common/apt.d>
include if exists <abstractions/common/apt.d>
# vim:syntax=apparmor

3
apparmor.d/abstractions/common/bwrap
View file

@ -1,7 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
# A minimal set of rules for sandboxed programs using bwrap.
# A profile using this abstraction still needs to set:
@ -54,3 +53,5 @@
owner @{PROC}/@{pid}/uid_map rw,
include if exists <abstractions/common/bwrap.d>
# vim:syntax=apparmor

5
apparmor.d/abstractions/common/chromium
View file

@ -2,7 +2,6 @@
# Copyright (C) 2022 Mikhail Morfikov
# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
# This abstraction is for chromium based application. Chromium based browsers
# need to use abstractions/chromium instead.
@ -40,4 +39,6 @@
owner @{PROC}/@{pid}/gid_map w,
owner @{PROC}/@{pid}/uid_map w,
include if exists <abstractions/common/chromium.d>
include if exists <abstractions/common/chromium.d>
# vim:syntax=apparmor

5
apparmor.d/abstractions/common/electron
View file

@ -1,7 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
# Minimal set of rules for all electron based UI application. It works as a
# *function* and requires some variables to be provided as *arguments* and set
@ -87,4 +86,6 @@
owner @{PROC}/@{pid}/task/@{tid}/status r,
owner @{PROC}/@{pid}/uid_map w, # If kernel.unprivileged_userns_clone = 1
include if exists <abstractions/common/electron.d>
include if exists <abstractions/common/electron.d>
# vim:syntax=apparmor

5
apparmor.d/abstractions/common/gnome
View file

@ -1,7 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
# Minimal set of rules for all gnome based UI application.
@ -25,4 +24,6 @@
owner @{PROC}/@{pid}/cmdline r,
include if exists <abstractions/common/gnome.d>
include if exists <abstractions/common/gnome.d>
# vim:syntax=apparmor

5
apparmor.d/abstractions/common/systemd
View file

@ -2,7 +2,6 @@
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
ptrace (read) peer=@{p_systemd},
@ -19,4 +18,6 @@
/dev/kmsg w,
include if exists <abstractions/common/systemd.d>
include if exists <abstractions/common/systemd.d>
# vim:syntax=apparmor