felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-07 23:18:10 +00:00
parent 37dd97a875
commit f20ccedf4f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 44 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/groups/freedesktop/polkit-agent-helper
View file

@ -11,10 +11,10 @@ include <tunables/global>
@{exec_path} += @{libexec}/polkit-agent-helper-[0-9]
profile polkit-agent-helper @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/authentication>
include <abstractions/nameservice-strict>
include <abstractions/consoles>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
capability audit_write,
capability dac_override,
@ -41,11 +41,14 @@ profile polkit-agent-helper @{exec_path} {
@{exec_path} mr,
# file_inherit
owner /dev/tty[0-9]* rw,
owner @{HOME}/.xsession-errors w,
@{run}/faillock/[a-zA-z0-9]* rwk,
@{PROC}/1/cgroup r,
owner @{PROC}/@{pid}/cgroup r,
owner /dev/tty[0-9]* rw,
include if exists <local/polkit-agent-helper>
}

2
apparmor.d/groups/freedesktop/xdg-desktop-portal
View file

@ -133,10 +133,10 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/pipewire-[0-9]* rw,
@{PROC}/ r,
@{PROC}/*/ r,
@{PROC}/1/cgroup r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/osrelease r,
@{PROC}/@{pid}/ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/task/ r,
owner @{PROC}/@{pid}/task/@{tid}/ r,