felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): improve kde integration.

Browse source
This commit is contained in:
Alexandre Pujol 2023-08-27 14:32:08 +01:00
parent 41e0ac6ba8
commit ec3c5cd62e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
36 changed files with 125 additions and 116 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/akonadi/akonadi_akonotes_resource
View file

@ -29,8 +29,8 @@ profile akonadi_akonotes_resource @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_akonotes_resource_[0-9]rc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_akonotes_resource_[0-9]{,_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_share_dirs}/notes/**/ r,

13
apparmor.d/groups/akonadi/akonadi_archivemail_agent
View file

@ -15,6 +15,7 @@ profile akonadi_archivemail_agent @{exec_path} {
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@ -23,7 +24,6 @@ profile akonadi_archivemail_agent @{exec_path} {
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/usr/share/mime/{,**} r,
/usr/share/qt{5,}/translations/*.qm r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
@ -33,18 +33,15 @@ profile akonadi_archivemail_agent @{exec_path} {
owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/akonadi_archivemail_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_archivemail_agent r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_archivemail_agent_changes{,.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/emaildefaults r,
owner @{user_config_dirs}/emailidentities.lock rwk,
owner @{user_config_dirs}/emailidentities* rwl,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/QtProject/qtlogging.ini r,
owner @{user_config_dirs}/emailidentities{,.@{rand6}} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/akonadi/file_db_data/{,**} r,

7
apparmor.d/groups/akonadi/akonadi_birthdays_resource
View file

@ -20,17 +20,18 @@ profile akonadi_birthdays_resource @{exec_path} {
@{exec_path} mr,
/usr/share/akonadi/plugins/{,**} r,
/usr/share/hwdata/*.ids r,
/usr/share/qt{5,}/translations/*.qm r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/qt{5,}/translations/*.qm r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_birthdays_resource{,_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,

4
apparmor.d/groups/akonadi/akonadi_contacts_resource
View file

@ -31,8 +31,8 @@ profile akonadi_contacts_resource @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_contacts_resource_[0-9]rc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_contacts_resource_[0-9]{,_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,

3
apparmor.d/groups/akonadi/akonadi_control
View file

@ -36,8 +36,7 @@ profile akonadi_control @{exec_path} {
owner @{user_cache_dirs}/akonadi/{,**} rwl,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/agentsrc.lock k,
owner @{user_config_dirs}/akonadi/** rwl -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/libaccounts-glib/accounts.db{,-shm,-wal} rwk,

5
apparmor.d/groups/akonadi/akonadi_followupreminder_agent
View file

@ -34,9 +34,8 @@ profile akonadi_followupreminder_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_followupreminder_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_followupreminder_agent{,_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,

4
apparmor.d/groups/akonadi/akonadi_ical_resource
View file

@ -26,8 +26,8 @@ profile akonadi_ical_resource @{exec_path} {
owner @{user_cache_dirs}/akonadi_ical_resource_[0-9]/{,*} rwl,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_ical_resource_[0-9]rc rwl,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_ical_resource_[0-9]{,_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,

11
apparmor.d/groups/akonadi/akonadi_indexing_agent
View file

@ -33,17 +33,18 @@ profile akonadi_indexing_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}//#@{int} rw,
owner @{user_config_dirs}/akonadi_indexing_agentrc r,
owner @{user_config_dirs}/akonadi/#@{int} rw,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_indexing_agent{,.*} rwlk,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/akonadi/** rwk,
owner @{user_share_dirs}/akonadi/ rw,
owner @{user_share_dirs}/akonadi/** rwlk -> @{user_share_dirs}/akonadi/**,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,

4
apparmor.d/groups/akonadi/akonadi_maildir_resource
View file

@ -32,8 +32,8 @@ profile akonadi_maildir_resource @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_maildir_resource_[0-9]rc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_maildir_resource_[0-9]{,_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,

17
apparmor.d/groups/akonadi/akonadi_maildispatcher_agent
View file

@ -15,7 +15,9 @@ profile akonadi_maildispatcher_agent @{exec_path} {
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/qt5>
include <abstractions/ssl_certs>
include <abstractions/vulkan>
include <abstractions/X-strict>
@ -24,12 +26,15 @@ profile akonadi_maildispatcher_agent @{exec_path} {
network inet stream,
network inet6 stream,
network netlink dgram,
network netlink raw,
@{exec_path} mr,
/usr/share/akonadi/plugins/{,**} r,
/usr/share/hwdata/*.ids r,
/usr/share/mime/{,**} r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/akonadi_maildispatcher_agent.notifyrc r,
/usr/share/mime/{,**} r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
@ -37,15 +42,17 @@ profile akonadi_maildispatcher_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi/#@{int} rw,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_maildispatcher_agent* rwkl,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi_maildispatcher_agent.notifyrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/ksslcertificatemanager r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_config_dirs}/mailtransports r,
owner @{user_config_dirs}/specialmailcollectionsrc r,
owner @{user_share_dirs}/akonadi/file_db_data/{,**} r,
@{PROC}/sys/kernel/core_pattern r,

5
apparmor.d/groups/akonadi/akonadi_mailfilter_agent
View file

@ -40,9 +40,8 @@ profile akonadi_mailfilter_agent @{exec_path} {
owner @{user_config_dirs}/agent_config_akonadi_mailfilter_agent r,
owner @{user_config_dirs}/akonadi_*_resource_*rc r,
owner @{user_config_dirs}/akonadi_mailfilter_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_mailfilter_agent r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_mailfilter_agent_changes{,.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/emaildefaults r,
owner @{user_config_dirs}/emailidentities.lock rwk,

4
apparmor.d/groups/akonadi/akonadi_mailmerge_agent
View file

@ -35,8 +35,8 @@ profile akonadi_mailmerge_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_mailmerge_agent_changes.dat rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,

4
apparmor.d/groups/akonadi/akonadi_migration_agent
View file

@ -30,8 +30,8 @@ profile akonadi_migration_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi-migrationrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_migration_agent_changes{,.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,

4
apparmor.d/groups/akonadi/akonadi_newmailnotifier_agent
View file

@ -35,8 +35,8 @@ profile akonadi_newmailnotifier_agent @{exec_path} {
owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/akonadi_newmailnotifier_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_newmailnotifier_agent_changes{,_changes.dat,.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/emaildefaults r,
owner @{user_config_dirs}/emailidentities.lock rwk,
owner @{user_config_dirs}/emailidentities* rwl,

4
apparmor.d/groups/akonadi/akonadi_notes_agent
View file

@ -36,8 +36,8 @@ profile akonadi_notes_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_*_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_notes_agent_changes{,.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,

4
apparmor.d/groups/akonadi/akonadi_sendlater_agent
View file

@ -36,8 +36,8 @@ profile akonadi_sendlater_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_sendlater_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_sendlater_agent_changes{,.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,

5
apparmor.d/groups/akonadi/akonadi_unifiedmailbox_agent
View file

@ -31,9 +31,8 @@ profile akonadi_unifiedmailbox_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_unifiedmailbox_agentrc r,
owner @{user_config_dirs}/{*,akonadi/}agent_config_akonadi_unifiedmailbox_agent{,_changes.dat,.conf_changes.dat} rw,
owner @{user_config_dirs}/{*,akonadi/}akonadi_unifiedmailbox_agent{,_changes.dat,.conf_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,