24 lines
975 B
Text
24 lines
975 B
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2020-2022 Mikhail Morfikov
|
|
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
/etc/writable/localtime r,
|
|
/usr/share/locale/ r,
|
|
|
|
# Allow to receive some signals
|
|
signal (receive) peer=htop,
|
|
signal (receive) peer=sudo,
|
|
signal (receive) peer=top,
|
|
signal (receive) set=(hup) peer=xinit,
|
|
signal (receive) set=(term,cont) peer=systemd,
|
|
signal (receive) set=(term,kill,stop,cont) peer=systemd-shutdown,
|
|
signal (receive) set=(term,kill) peer=gnome-shell,
|
|
signal (receive) set=(term,kill) peer=openbox,
|
|
signal (receive) set=(term,kill) peer=su,
|
|
|
|
ptrace (readby) peer=systemd-coredump,
|
|
|
|
# Allow to write a user defined fifo log devices
|
|
owner /dev/log-xsession w,
|
|
owner /dev/log-gnupg w,
|