felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

xournalpp improvements

Browse source
This commit is contained in:
valoq 2025-07-29 14:19:17 +02:00 • committed by Alex
parent d4d4f3ae4b
commit fc421183a0
1 changed files with 8 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

15
apparmor.d/profiles-s-z/xournalpp
View file

@ -8,11 +8,10 @@ include <tunables/global>
@{exec_path} = @{bin}/xournalpp @{exec_path} = @{bin}/xournalpp
profile xournalpp @{exec_path} { profile xournalpp @{exec_path} {
include <abstractions/audio-client>
include <abstractions/base> include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/desktop> include <abstractions/desktop>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/user-read-strict> include <abstractions/user-read-strict>
@ -20,16 +19,15 @@ profile xournalpp @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{open_path} rPx -> child-open-browsers,
/usr/share/xournalpp/** r, /usr/share/xournalpp/** r,
/etc/machine-id r, /etc/machine-id r,
/etc/pipewire/jack.conf.d/ r, /etc/pipewire/jack.conf.d/ r,
owner @{user_config_dirs}/xournalpp/** rw, owner @{user_config_dirs}/xournalpp/{,**} rw,
owner @{user_cache_dirs}/xournalpp/** rw, owner @{user_cache_dirs}/xournalpp/{,**} rw,
/dev/snd/controlC@{int} w,
/dev/snd/pcmC@{rand4} rw,
@{sys}/devices/virtual/dmi/id/bios_vendor r, @{sys}/devices/virtual/dmi/id/bios_vendor r,
@{sys}/devices/virtual/dmi/id/board_vendor r, @{sys}/devices/virtual/dmi/id/board_vendor r,
@ -38,6 +36,9 @@ profile xournalpp @{exec_path} {
owner @{PROC}/@{pid}/task/@{tid}/comm rw, owner @{PROC}/@{pid}/task/@{tid}/comm rw,
/dev/snd/controlC@{int} w,
/dev/snd/pcmC@{rand4} rw,
include if exists <local/xournalpp> include if exists <local/xournalpp>
} }