felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): cleanup usage of icons abs.

Browse source
This commit is contained in:
Alexandre Pujol 2025-08-30 19:37:47 +02:00
parent 4f1fddd2fb
commit f5e2572457
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
9 changed files with 3 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/groups/freedesktop/xsetroot
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/xsetroot @{exec_path} = @{bin}/xsetroot
profile xsetroot @{exec_path} { profile xsetroot @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/icons>
include <abstractions/X-strict> include <abstractions/X-strict>
capability dac_read_search, capability dac_read_search,
@ -18,10 +19,6 @@ profile xsetroot @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/usr/share/icons/{,**} r,
owner @{HOME}/.icons/** r,
owner @{user_share_dirs}/sddm/xorg-session.log w, owner @{user_share_dirs}/sddm/xorg-session.log w,
owner @{user_share_dirs}/sddm/wayland-session.log w, owner @{user_share_dirs}/sddm/wayland-session.log w,

1
apparmor.d/groups/gnome/gnome-control-center
View file

@ -88,7 +88,6 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
@{open_path} rPx -> child-open-any, @{open_path} rPx -> child-open-any,
/opt/**/share/icons/{,**} r,
/snap/*/@{int}/**.png r, /snap/*/@{int}/**.png r,
/usr/share/backgrounds/{,**} r, /usr/share/backgrounds/{,**} r,
/usr/share/cups/data/testprint r, /usr/share/cups/data/testprint r,

1
apparmor.d/groups/gnome/gnome-shell
View file

@ -187,7 +187,6 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
@{user_share_dirs}/gnome-shell/extensions/*/** rPUx, @{user_share_dirs}/gnome-shell/extensions/*/** rPUx,
/usr/share/gnome-shell/extensions/*/** rPUx, /usr/share/gnome-shell/extensions/*/** rPUx,
/opt/**/share/icons/{,**} r,
/snap/*/@{uid}/**.@{image_ext} r, /snap/*/@{uid}/**.@{image_ext} r,
/usr/share/**.@{image_ext} r, /usr/share/**.@{image_ext} r,
/usr/share/**/icons/{,**} r, /usr/share/**/icons/{,**} r,

3
apparmor.d/groups/hyprland/hyprpaper
View file

@ -9,12 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/hyprpaper @{exec_path} = @{bin}/hyprpaper
profile hyprpaper @{exec_path} flags=(attach_disconnected) { profile hyprpaper @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/icons>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
@{exec_path} mr, @{exec_path} mr,
/usr/share/icons/** r,
owner @{HOME}/@{XDG_WALLPAPERS_DIR}/** r, owner @{HOME}/@{XDG_WALLPAPERS_DIR}/** r,
owner @{user_config_dirs}/hypr/hyprpaper.conf r, owner @{user_config_dirs}/hypr/hyprpaper.conf r,

3
apparmor.d/groups/hyprland/hyprpicker
View file

@ -9,12 +9,11 @@ include <tunables/global>
@{exec_path} = @{bin}/hyprpicker @{exec_path} = @{bin}/hyprpicker
profile hyprpicker @{exec_path} { profile hyprpicker @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/icons>
@{exec_path} mr, @{exec_path} mr,
@{bin}/wl-copy Px, @{bin}/wl-copy Px,
/usr/share/icons/** r,
owner @{run}/user/@{uid}/.hyprpicker* rw, owner @{run}/user/@{uid}/.hyprpicker* rw,
owner /dev/shm/wlroots-@{rand6} r, owner /dev/shm/wlroots-@{rand6} r,
owner /dev/shm/@{uuid} r, owner /dev/shm/@{uuid} r,

2
apparmor.d/groups/kde/kaccess
View file

@ -24,8 +24,6 @@ profile kaccess @{exec_path} {
@{bin}/gsettings rPx, @{bin}/gsettings rPx,
/usr/share/icons/{,**} r,
/etc/machine-id r, /etc/machine-id r,
owner @{user_config_dirs}/breezerc r, owner @{user_config_dirs}/breezerc r,

1
apparmor.d/groups/kde/kiod
View file

@ -20,7 +20,6 @@ profile kiod @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/usr/share/icons/breeze/index.theme r,
/usr/share/mime/{,**} r, /usr/share/mime/{,**} r,
owner @{user_config_dirs}/#@{int} rw, owner @{user_config_dirs}/#@{int} rw,

3
apparmor.d/groups/kde/plasmashell
View file

@ -77,9 +77,6 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
#aa:exec kioworker #aa:exec kioworker
/opt/**/share/icons/{,**} r,
/opt/*/**/*.desktop r,
/opt/*/**/*.png r,
/snap/*/@{uid}/**.@{image_ext} r, /snap/*/@{uid}/**.@{image_ext} r,
/usr/share/*/icons/{,**} r, /usr/share/*/icons/{,**} r,
/usr/share/akonadi/{,**} r, /usr/share/akonadi/{,**} r,

1
apparmor.d/groups/lxqt/lxqt-runner
View file

@ -14,7 +14,6 @@ profile lxqt-runner @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/usr/share/icons/ r,
/usr/share/desktop-directories/ r, /usr/share/desktop-directories/ r,
/usr/share/desktop-directories/{,**} r, /usr/share/desktop-directories/{,**} r,