apparmor.d/apparmor.d/profiles-m-r/pinentry-kwallet
2021-09-15 16:55:27 +01:00

52 lines
1.3 KiB
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2018-2021 Mikhail Morfikov
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/pinentry-kwallet
profile pinentry-kwallet @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/freedesktop.org>
signal (send) set=(term, kill) peer=gpg-agent,
@{exec_path} mr,
/{usr/,}bin/pinentry-* rPx,
/{usr/,}bin/kwalletcli_getpin rix,
/{usr/,}bin/kwalletcli rCx -> kwalletcli,
# when wrong PIN is provided
/{usr/,}bin/date rix,
/{usr/,}bin/mksh rix,
/{usr/,}bin/env rix,
owner @{HOME}/.Xauthority r,
/usr/share/hwdata/pnp.ids r,
profile kwalletcli {
include <abstractions/base>
/{usr/,}bin/kwalletcli mr,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwalletrc r,
/{usr/,}lib/@{multiarch}/qt5/plugins/kf5/org.kde.kwindowsystem.platforms/KF5WindowSystemKWaylandPlugin.so mr,
/{usr/,}lib/@{multiarch}/qt5/plugins/kf5/org.kde.kwindowsystem.platforms/KF5WindowSystemX11Plugin.so mr,
owner @{HOME}/.Xauthority r,
/usr/share/hwdata/pnp.ids r,
}
include if exists <local/pinentry-kwallet>
}