felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add the open_path variable.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 23:43:14 +00:00
parent a46dfaad61
commit f362975ce7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 36 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/profiles-a-f/blueman
View file

@ -33,10 +33,8 @@ profile blueman @{exec_path} flags=(attach_disconnected) {
@{bin}/{b,d}ash rix,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{bin}/blueman-tray rPx,
@{open_path} rPx -> child-open,
/usr/share/blueman/{,**} r,
/usr/share/X11/xkb/{,**} r,

5
apparmor.d/profiles-a-f/code
View file

@ -40,14 +40,11 @@ profile code flags=(attach_disconnected) {
@{lib}/code/node_modules.asar.unpacked/**.node rm,
# Core tools
@{bin}/gio rPx -> child-open,
@{bin}/git rPx,
@{bin}/gpg{,2} rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/rg rix,
@{bin}/xdg-open rPx -> child-open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
# The shell is not confined on purpose.
@{bin}/{,b,d,rb}ash rUx,

4
apparmor.d/profiles-a-f/element
View file

@ -42,9 +42,7 @@ profile element @{exec_path} {
@{lib}/element/{,**} r,
@{lib}/element/app.asar.unpacked/node_modules/**.node mr,
@{bin}/xdg-open rPx -> child-open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/opt/intel/oneapi/{compiler,lib,mkl}/**/ r,
/opt/intel/oneapi/{compiler,lib,mkl}/**.so* mr,

3
apparmor.d/profiles-a-f/engrampa
View file

@ -64,8 +64,7 @@ profile engrampa @{exec_path} {
# For deb packages
@{bin}/dpkg-deb rix,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{bin}/xdg-open rPx -> child-open,
@{open_path} rPx -> child-open,
# Allowed apps to open
@{bin}/engrampa rPx,

3
apparmor.d/profiles-a-f/evince
View file

@ -37,8 +37,7 @@ profile evince @{exec_path} {
@{bin}/{,ba,da}sh rix,
@{bin}/gio-launch-desktop rPx,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/usr/share/djvu/{,**} r,
/usr/share/evince/{,**} r,

3
apparmor.d/profiles-a-f/file-roller
View file

@ -41,8 +41,7 @@ profile file-roller @{exec_path} {
@{bin}/zstd rix,
@{lib}/p7zip/7z rix,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/usr/share/themes/{,**} r,
/usr/share/X11/xkb/{,**} r,