apparmor.d/apparmor.d/groups/pacman/pacman-hook-gtk4-querymodules
REmerald f1a0349978 feat(groups/{_,k,n,p}*): vim syntax support
Add vim modeline instructing the editor to use syntax plugin provided by apparmor.
Continuation of #394 to keep the diff list relatively short.
2024-06-16 17:31:28 +01:00

30 lines
650 B
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /usr/share/libalpm/scripts/gtk4-querymodules
profile pacman-hook-gtk4-querymodules @{exec_path} {
include <abstractions/base>
capability dac_read_search,
@{exec_path} mr,
@{sh_path} r,
@{bin}/rmdir rix,
@{bin}/gio-querymodules rPx,
@{lib}/gtk-4.0/*/*/ w,
# Inherit Silencer
deny network inet6 stream,
deny network inet stream,
include if exists <local/pacman-hook-gtk4-querymodules>
}
# vim:syntax=apparmor