felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

cider-review-fixes

Browse source
This commit is contained in:
Stoppedpuma 2025-08-27 15:52:00 +02:00 • committed by Alex
parent f5970fcc67
commit eedbc2223c
1 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

18
apparmor.d/profiles-a-f/cider
View file

@ -6,10 +6,13 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{name} = {C,c}ider sh.cider.genten
@{domain} = sh.cider.genten org.chromium.Chromium @{domain} = sh.cider.genten org.chromium.Chromium
@{lib_dirs} = @{lib}/cider @{lib_dirs} = @{lib}/cider
@{cache_dirs} = @{user_cache_dirs}/@{name}
@{config_dirs} = @{user_config_dirs}/@{name}
@{exec_path} = @{bin}/cider @{bin}/Cider @{lib_dirs}/Cider @{exec_path} = @{bin}/{C,c}ider @{lib_dirs}/Cider
profile cider @{exec_path} { profile cider @{exec_path} {
include <abstractions/base-strict> include <abstractions/base-strict>
include <abstractions/gtk> include <abstractions/gtk>
@ -18,8 +21,9 @@ profile cider @{exec_path} {
include <abstractions/freedesktop.org> include <abstractions/freedesktop.org>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/common/chromium> include <abstractions/common/electron>
include <abstractions/audio> include <abstractions/audio>
include <abstractions/X-strict>
network inet dgram, network inet dgram,
network inet6 dgram, network inet6 dgram,
@ -32,15 +36,13 @@ profile cider @{exec_path} {
@{lib_dirs}/ r, @{lib_dirs}/ r,
@{lib_dirs}/** r, @{lib_dirs}/** r,
@{lib_dirs}/libffmpeg.so mr, @{lib_dirs}/libffmpeg.so mr,
@{lib_dirs}/chrome-sandbox rpx, @{lib_dirs}/chrome-sandbox rPx,
@{bin}/xdg-settings rpx, @{bin}/xdg-settings rPx,
owner @{user_config_dirs}/sh.cider.genten/ rw, owner @{user_config_dirs}/sh.cider.genten/ rw,
owner @{user_config_dirs}/sh.cider.genten/** rwk, owner @{user_config_dirs}/sh.cider.genten/** rwk,
owner @{user_config_dirs}/sh.cider.genten/WidevineCdm/*/_platform_specific/linux_x64/libwidevinecdm.so mr, owner @{user_config_dirs}/sh.cider.genten/WidevineCdm/*/_platform_specific/linux_@{arch}/libwidevinecdm.so mr,
owner @{user_config_dirs}/sh.cider.genten/WidevineCdm/*/manifest.json r,
owner @{user_config_dirs}/sh.cider.genten/WidevineCdm/*/latest-component-updated-widevine-cdm r,
@{PROC}/ r, @{PROC}/ r,
@{PROC}/@{pid}/stat r, @{PROC}/@{pid}/stat r,
@ -53,8 +55,6 @@ profile cider @{exec_path} {
owner @{PROC}/@{pid}/oom_{,score_}adj rw, owner @{PROC}/@{pid}/oom_{,score_}adj rw,
owner @{PROC}/@{pid}/statm r, owner @{PROC}/@{pid}/statm r,
/usr/share/xkeyboard-config-2/** r,
include if exists <local/cider> include if exists <local/cider>
} }