logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

X (2063B)

    

  1. # vim:syntax=apparmor
  2. # ------------------------------------------------------------------
  3. #
  4. #    Copyright (C) 2002-2009 Novell/SUSE
  5. #    Copyright (C) 2009-2011 Canonical Ltd.
  6. #
  7. #    This program is free software; you can redistribute it and/or
  8. #    modify it under the terms of version 2 of the GNU General Public
  9. #    License published by the Free Software Foundation.
  10. #
  11. # ------------------------------------------------------------------
  13.   abi <abi/3.0>,
  15.   include <abstractions/dri-common>
  18.   # .ICEauthority files required for X authentication, per user
  19.   owner @{HOME}/.ICEauthority r,
  20.   owner @{run}/user/*/ICEauthority r,
  22.   # .Xauthority files required for X connections, per user
  23.   owner @{HOME}/.Xauthority r,
  24.   owner @{HOME}/.local/share/sddm/.Xauthority r,
  25.   owner @{run}/gdm{,3}/*/database r,
  26.   owner @{run}/lightdm/authority/[0-9]* r,
  27.   owner @{run}/lightdm/*/xauthority r,
  28.   owner @{run}/user/*/gdm/Xauthority r,
  29.   owner @{run}/user/*/X11/Xauthority r,
  30.   owner @{run}/user/*/xauth_* r,
  32.   # the unix socket to use to connect to the display
  33.   /tmp/.X11-unix/* rw,
  34.   unix (connect, receive, send)
  35.        type=stream
  36.        peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
  37.   unix (connect, receive, send)
  38.        type=stream
  39.        peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
  41.   /usr/include/X11/               r,
  42.   /usr/include/X11/**             r,
  44.   # The X tree changes and is large -- grant read access to the whole thing
  45.   /usr/X11R6/**                   r,
  46.   /usr/share/X11/                 r,
  47.   /usr/share/X11/**               r,
  48.   /usr/X11R6/**.so*               mr,
  50.   # EGL
  51.   /usr/lib/@{multiarch}/egl/*.so* mr,
  53.   # Xcompose
  54.   owner @{HOME}/.XCompose         r,
  55.   /var/cache/libx11/compose/*     r,
  56.   deny /var/cache/libx11/compose/* wlk,
  58.   # mouse themes
  59.   /etc/X11/cursors/               r,
  60.   /etc/X11/cursors/**             r,
  61.   /usr/share/cursors/xorg-x11/    r,
  62.   /usr/share/cursors/xorg-x11/**  r,
  64.   # Xwayland
  65.   owner @{run}/user/*/.mutter-Xwaylandauth.* r,
  67.   # Include additions to the abstraction
  68.   include if exists <abstractions/X.d>