feat(profile): general update.

This commit is contained in:
Alexandre Pujol 2023-12-09 11:28:23 +00:00
parent a9c864fe60
commit ed1ea18a9e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 38 additions and 4 deletions

View file

@ -15,6 +15,7 @@ profile gio-launch-desktop @{exec_path} flags=(attach_disconnected) {
include <abstractions/app-launcher-user>
include <abstractions/consoles>
include <abstractions/gnome-strict>
include <abstractions/trash>
@{exec_path} mr,

View file

@ -25,6 +25,7 @@ profile ssh-agent @{exec_path} {
@{bin}/kwalletaskpass rPUx,
@{bin}/openbox-session rPx,
@{bin}/startkde rPUx,
@{bin}/startxfce4 rPUx,
@{bin}/sway rPUx,
owner @{HOME}/@{XDG_SSH_DIR}/ rw,

View file

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-socket-proxyd
profile systemd-socket-proxyd @{exec_path} {
include <abstractions/base>
include <abstractions/systemd-common>
capability net_admin,
network inet stream,
network inet6 stream,
@{exec_path} mr,
include if exists <local/systemd-socket-proxyd>
}