apparmor.d/apparmor.d/groups/freedesktop/xdg-screensaver
2024-10-03 11:47:58 +01:00

58 lines
1.5 KiB
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2018-2021 Mikhail Morfikov
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/xdg-screensaver
profile xdg-screensaver @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/freedesktop.org>
@{exec_path} r,
@{sh_path} rix,
@{bin}/{,e}grep ix,
@{bin}/{m,g,}awk ix,
@{bin}/basename ix,
@{bin}/cat ix,
@{bin}/cut ix,
@{bin}/dirname ix,
@{bin}/kill ix,
@{bin}/ln ix,
@{bin}/lockfile ix,
@{bin}/mktemp ix,
@{bin}/mv ix,
@{bin}/perl ix,
@{bin}/readlink ix,
@{bin}/realpath ix,
@{bin}/rm ix,
@{bin}/sed ix,
@{bin}/uname ix,
@{bin}/xautolock ix,
@{bin}/dbus-send Cx -> bus,
@{bin}/xprop Px,
@{bin}/xset Px,
@{bin}/ps Px,
@{bin}/hostname Px,
profile bus flags=(complain) {
include <abstractions/base>
include <abstractions/app/bus>
include <abstractions/bus-session>
#aa:dbus talk bus=session name=org.freedesktop.ScreenSaver label=gsd-screensaver-proxy
#aa:dbus talk bus=session name=org.gnome.ScreenSaver label=gjs-console
include if exists <local/xdg-screensaver_bus>
}
include if exists <local/xdg-screensaver>
}
# vim:syntax=apparmor