30 lines
1.2 KiB
Text
30 lines
1.2 KiB
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
# The unix socket to use to connect to the display
|
|
unix (connect, receive, send) type=stream peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
|
|
unix (connect, receive, send) type=stream peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
|
|
unix type=stream addr="@/tmp/.ICE-unix/[0-9]*",
|
|
unix type=stream addr="@/tmp/.X11-unix/X[0-9]*",
|
|
|
|
/usr/share/X11/{,**} r,
|
|
/usr/share/xsessions/{,*.desktop} r, # Available Xsessions
|
|
|
|
/etc/X11/cursors/{,**} r,
|
|
|
|
owner @{HOME}/.ICEauthority r, # ICEauthority files required for X authentication, per user
|
|
owner @{HOME}/.Xauthority r, # Xauthority files required for X connections, per user
|
|
|
|
/tmp/.ICE-unix/* rw,
|
|
/tmp/.X@{int}-lock rw,
|
|
/tmp/.X11-unix/* rw,
|
|
owner @{tmp}/xauth_@{rand6} rl -> /tmp/#@{int},
|
|
|
|
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} rw, # Xwayland
|
|
owner @{run}/user/@{uid}/gdm{[1-9],}/Xauthority r,
|
|
owner @{run}/user/@{uid}/ICEauthority r,
|
|
owner @{run}/user/@{uid}/X11/Xauthority r,
|
|
owner @{run}/user/@{uid}/xauth_@{rand6} rl -> @{run}/user/@{uid}/#@{int},
|
|
|
|
include if exists <abstractions/X-strict.d>
|