apparmor.d/apparmor.d/groups/systemd/systemd-localed
Alexandre Pujol 4e5f4cb06a
feat: profiles and integration tests improvments.
Add the udbus variable to be used in `unix bind` rule for dbus.
2024-11-19 19:04:27 +00:00

43 lines
1.1 KiB
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2018-2022 Mikhail Morfikov
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-localed
profile systemd-localed @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus-system>
include <abstractions/consoles>
include <abstractions/common/systemd>
unix (bind) type=stream addr=@@{udbus}/bus/systemd-localed/system,
#aa:dbus own bus=system name=org.freedesktop.locale1
@{exec_path} mr,
/usr/share/kbd/keymaps/{,**} r,
/usr/share/systemd/*-map r,
/usr/share/X11/xkb/{,**} r,
/etc/.#locale.conf@{hex16} rw,
/etc/.#vconsole.conf* rw,
/etc/default/.#locale* rw,
/etc/default/keyboard r,
/etc/default/locale rw,
/etc/locale.conf rw,
/etc/vconsole.conf rw,
/etc/X11/xorg.conf.d/ r,
/etc/X11/xorg.conf.d/.#*.confd* rw,
/etc/X11/xorg.conf.d/*.conf rw,
@{att}/@{run}/systemd/notify rw,
include if exists <local/systemd-localed>
}
# vim:syntax=apparmor