felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add the open_path variable.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 23:43:14 +00:00
parent a46dfaad61
commit f362975ce7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 36 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/profiles-s-z/spotify
View file

@ -38,9 +38,7 @@ profile spotify @{exec_path} {
@{lib_dirs}/{,**} r,
@{lib_dirs}/*.so* mr,
@{bin}/xdg-open rPx -> child-open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/etc/libva.conf r,
/etc/machine-id r,

2
apparmor.d/profiles-s-z/syncthing
View file

@ -21,7 +21,7 @@ profile syncthing @{exec_path} {
@{exec_path} mrix,
@{bin}/xdg-open rPx -> child-open,
@{open_path} rPx -> child-open,
@{bin}/ip rix,
/usr/share/mime/{,*} r,

7
apparmor.d/profiles-s-z/thunderbird
View file

@ -80,11 +80,8 @@ profile thunderbird @{exec_path} {
@{bin}/gpgsm rPx,
# Desktop integration
@{bin}/exo-open rPx -> child-open,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/xdg-open rPx -> child-open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{bin}/lsb_release rPx -> lsb_release,
@{open_path} rPx -> child-open,
# Allowed apps to open
@{bin}/engrampa rPx,

3
apparmor.d/profiles-s-z/transmission-gtk
View file

@ -33,8 +33,7 @@ profile transmission-gtk @{exec_path} {
@{exec_path} mr,
@{bin}/xdg-open rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/usr/share/X11/xkb/{,**} r,

3
apparmor.d/profiles-s-z/vidcutter
View file

@ -38,8 +38,7 @@ profile vidcutter @{exec_path} {
@{bin}/ffprobe rPx,
@{bin}/mediainfo rPx,
@{bin}/xdg-open rPx -> child-open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/usr/share/hwdata/pnp.ids r,
/usr/share/qt5ct/** r,

3
apparmor.d/profiles-s-z/virt-manager
View file

@ -49,8 +49,7 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
@{bin}/ssh rPx,
@{lib}/spice-client-glib-usb-acl-helper rPx,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
@{open_path} rPx -> child-open,
/usr/share/egl/{,**} r,
/usr/share/gtksourceview-4/{,**} r,