felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

style, child-open-help, device

Browse source
This commit is contained in:
Roman Beslik 2025-04-25 17:17:49 +03:00
parent 58e27b15aa
commit efe622c0b6
1 changed files with 4 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/profiles-a-f/cheese
View file

@ -8,14 +8,12 @@ include <tunables/global>
@{exec_path} = @{bin}/cheese @{exec_path} = @{bin}/cheese
profile cheese @{exec_path} { profile cheese @{exec_path} {
include <abstractions/audio-client>
include <abstractions/base> include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/fonts> include <abstractions/desktop>
include <abstractions/freedesktop.org>
include <abstractions/graphics> include <abstractions/graphics>
include <abstractions/gstreamer> include <abstractions/gstreamer>
include <abstractions/gtk>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/thumbnails-cache-write> include <abstractions/thumbnails-cache-write>
@ -24,12 +22,9 @@ profile cheese @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{bin}/bwrap Px -> gnome-desktop-thumbnailers, @{bin}/bwrap Px -> gnome-desktop-thumbnailers,
@{open_path} rPx -> child-open, @{open_path} rPx -> child-open-help,
@{system_share_dirs}/X11/xkb/{,**} r,
@{system_share_dirs}/applications/{,*.desktop} r,
@{system_share_dirs}/gnome-video-effects/{,*.effect} r, @{system_share_dirs}/gnome-video-effects/{,*.effect} r,
@{system_share_dirs}/icons/{,**} r,
@{system_share_dirs}/ladspa/rdf/{,**} r, @{system_share_dirs}/ladspa/rdf/{,**} r,
@{system_share_dirs}/thumbnailers/{,*.thumbnailer} r, @{system_share_dirs}/thumbnailers/{,*.thumbnailer} r,
@ -41,8 +36,7 @@ profile cheese @{exec_path} {
owner @{user_cache_dirs}/gnome-desktop-thumbnailer/gstreamer-1.0/ r, owner @{user_cache_dirs}/gnome-desktop-thumbnailer/gstreamer-1.0/ r,
owner /dev/shm/wlroots-* r, @{run}/udev/data/c@{dynamic}:@{int} r,
@{run}/udev/data/c236:0 r,
owner @{tmp}/flatpak-seccomp-@{rand6} rw, owner @{tmp}/flatpak-seccomp-@{rand6} rw,
owner @{tmp}/gnome-desktop-thumbnailer-@{rand6}/{,**} rw, owner @{tmp}/gnome-desktop-thumbnailer-@{rand6}/{,**} rw,