c1d531525a
Move vim syntax comment to the end of the file, separated by newline, as requested in #380.
55 lines
1.9 KiB
Text
55 lines
1.9 KiB
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
# Instead of allowing the run of all software in @{bin}/, @{lib} the purpose of
|
|
# this abstraction is to list all GUI program that can open resources.
|
|
|
|
# Ultimately, only sandbox manager such as like bwrap, snap, flatpak, firejail
|
|
# should be present here. Until this day, this profile will be a controlled mess.
|
|
|
|
# Sandbox managers
|
|
@{bin}/bwrap rPUx,
|
|
@{bin}/firejail rPUx,
|
|
@{bin}/flatpak rPUx,
|
|
@{bin}/snap rPUx,
|
|
|
|
# Labeled programs
|
|
@{archive_viewers_path} rPUx,
|
|
@{browsers_path} rPx,
|
|
@{document_viewers_path} rPUx,
|
|
@{emails_path} rPUx,
|
|
@{file_explorers_path} rPx,
|
|
@{image_viewers_path} rPUx,
|
|
@{offices_path} rPUx,
|
|
@{text_editors_path} rPUx,
|
|
|
|
# Others
|
|
@{bin}/blueman-tray rPx,
|
|
@{bin}/discord{,-ptb} rPx,
|
|
@{bin}/draw.io rPUx,
|
|
@{bin}/dropbox rPx,
|
|
@{bin}/element-desktop rPx,
|
|
@{bin}/extension-manager rPx,
|
|
@{bin}/filezilla rPx,
|
|
@{bin}/flameshot rPx,
|
|
@{bin}/gimp* rPUx,
|
|
@{bin}/gnome-calculator rPUx,
|
|
@{bin}/gnome-disk-image-mounter rPx,
|
|
@{bin}/gnome-disks rPx,
|
|
@{bin}/gwenview rPUx,
|
|
@{bin}/kgx rPx,
|
|
@{bin}/qbittorrent rPx,
|
|
@{bin}/qpdfview rPx,
|
|
@{bin}/smplayer rPx,
|
|
@{bin}/steam-runtime rPUx,
|
|
@{bin}/telegram-desktop rPx,
|
|
@{bin}/transmission-gtk rPx,
|
|
@{bin}/viewnior rPUx,
|
|
@{bin}/vlc rPUx,
|
|
@{bin}/xbrlapi rPx,
|
|
|
|
|
|
include if exists <abstractions/app-open.d>
|
|
|
|
# vim:syntax=apparmor
|