felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): start using new abstractions (3)

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-19 23:49:30 +00:00
parent a79a3f3311
commit ef1776b8d5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 34 additions and 167 deletions
Download patch file Download diff file Expand all files Collapse all files

22
apparmor.d/profiles-s-z/steam
View file

@ -14,17 +14,11 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted,complain)
include <abstractions/chromium-common>
include <abstractions/consoles>
include <abstractions/dconf-write>
include <abstractions/desktop>
include <abstractions/disks-read>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/opencl>
include <abstractions/ssl_certs>
include <abstractions/vulkan>
capability sys_ptrace,
@ -104,8 +98,6 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted,complain)
/usr/lib/os-release rk,
/usr/share/fonts/**.{ttf,otf} rk,
/usr/share/terminfo/** r,
/usr/share/themes/{,**} r,
/usr/share/X11/{,**} r,
/usr/share/zenity/* r,
/etc/lsb-release r,
@ -116,15 +108,12 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted,complain)
@{bin}/ r,
@{lib}/ r,
/ r,
/{usr/,}{local/,} r,
/{usr/,}{local/,}share/ r,
/etc/ r,
/home/ r,
/run/ r,
/var/ r,
owner @{HOME}/ r,
owner @{HOME}/.local/ r,
owner @{HOME}/.steam/{,**} rw,
owner @{HOME}/.steam/registry.vdf rwk,
owner @{HOME}/.steampath rw,
@ -132,22 +121,17 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted,complain)
owner @{user_games_dirs}/{,**} rwkl,
owner @{user_config_dirs}/ r,
owner @{user_config_dirs}/autostart/ r,
owner @{user_config_dirs}/cef_user_data/{,**} r,
owner @{user_config_dirs}/unity3d/{,**} rwk,
owner @{user_config_dirs}/user-dirs.dirs r,
owner @{user_share_dirs}/ r,
owner @{user_share_dirs}/applications/*.desktop w,
owner @{user_share_dirs}/icons/hicolor/**/apps/steam*.png rw,
owner @{user_share_dirs}/Steam/ rw,
owner @{user_share_dirs}/Steam/** rwkl -> @{user_share_dirs}/Steam/**,
owner @{user_share_dirs}/vulkan/implicit_layer.d/steam*.json rwk,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
owner @{run}/user/@{uid}/gdm/Xauthority r,
owner /dev/shm/#@{int} rw,
owner /dev/shm/fossilize-*-@{int}-@{int} rw,
owner /dev/shm/u@{uid}-Shm_@{hex} rw,
@ -241,7 +225,7 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted,complain)
@{sys}/bus/pci/devices/ r,
@{sys}/bus/pci/slots/ r,
@{sys}/bus/pci/slots/@{int}/address r,
@{sys}/devices/pci[0-9]*/** r,
@{sys}/devices/@{pci}/** r,
owner /dev/shm/ValveIPCSHM_@{uid} rw,