apparmor.d/apparmor.d/groups/gnome/session-migration
Alexandre Pujol a370281e9b
feat(profile): use desktop user variable in gnome.
Also restrict access to these files.
2024-03-18 15:31:55 +00:00

21 lines
No EOL
509 B
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/session-migration
profile session-migration @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/usr/share/session-migration/{,**} r,
owner @{gdm_share_dirs}/session_migration-* rw,
owner @{user_share_dirs}/session_migration-* rw,
include if exists <local/session-migration>
}