64 lines
2.1 KiB
Text
64 lines
2.1 KiB
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# Copyright (C) 2024 Besanon <m231009ts@mailfence.com>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
abi <abi/3.0>,
|
|
|
|
include <tunables/global>
|
|
|
|
@{exec_pathLXI} = @{bin}/lximage-qt
|
|
profile lximage-qt @{exec_pathLXI} {
|
|
include <abstractions/base>
|
|
include <abstractions/gtk>
|
|
include <abstractions/lxqt>
|
|
include <abstractions/dbus-session-strict>
|
|
include <abstractions/dbus-accessibility-strict>
|
|
include <abstractions/gvfs-open>
|
|
include <abstractions/user-read>
|
|
include <abstractions/user-write>
|
|
include <abstractions/user-download-strict>
|
|
include <abstractions/thumbnails-cache-read>
|
|
|
|
@{exec_pathLXI} mr,
|
|
@{lib}exec/menu-cache/menu-cached mr,
|
|
|
|
/usr/share/icons/{,**} r,
|
|
/usr/share/desktop-directories/{,**} r,
|
|
/usr/share/lximage-qt/translations/{,**} r,
|
|
/usr/share/libfm-qt6/translations/libfm-qt_de.qm r,
|
|
/usr/share/thumbnailers/{,**} r,
|
|
/usr/share/gvfs/remote-volume-monitors/ r,
|
|
/usr/share/gvfs/remote-volume-monitors/udisks2.monitor r,
|
|
|
|
/etc/fstab r,
|
|
/etc/nsswitch.conf r,
|
|
/etc/xdg/menus/lxqt-applications.menu r,
|
|
|
|
owner @{user_cache_dirs}/thumbnails/normal/** rwk,
|
|
owner @{user_config_dirs}/#@{int} rwk,
|
|
owner @{user_config_dirs}/QtProject.conf rw,
|
|
owner @{user_config_dirs}/QtProject.conf.lock rwk,
|
|
owner @{user_config_dirs}/QtProject.conf.@{rand6} rwkl -> @{user_config_dirs}/#@{int},
|
|
owner @{user_config_dirs}/lximage-qt/settings.conf rw,
|
|
owner @{user_config_dirs}/lximage-qt/settings.conf.lock rwk,
|
|
owner @{user_config_dirs}/lximage-qt/QtProject.conf.@{rand6} rwkl -> @{user_config_dirs}/lximage-qt/#@{int},
|
|
owner @{user_config_dirs}/lximage-qt/#@{int} rw,
|
|
|
|
@{PROC}/sys/kernel/random/boot_id r,
|
|
owner @{PROC}/@{pid}/mountinfo r,
|
|
owner @{PROC}/@{pid}/mounts r,
|
|
|
|
owner @{HOME}/.inputrc r,
|
|
owner @{HOME}/.bashrc r,
|
|
owner @{HOME}/.bash_profile r,
|
|
owner @{HOME}/.bash_logout r,
|
|
owner @{HOME}/.bash_history r,
|
|
owner @{HOME}/.xscreensaver r,
|
|
|
|
owner /tmp/@{int} r,
|
|
|
|
/dev/tty rw,
|
|
|
|
include if exists <local/lximage-qt>
|
|
}
|