logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

gnome (3789B)

    

  1. # vim:syntax=apparmor
  2. # ------------------------------------------------------------------
  3. #
  4. #    Copyright (C) 2002-2009 Novell/SUSE
  5. #    Copyright (C) 2009-2011 Canonical Ltd.
  6. #
  7. #    This program is free software; you can redistribute it and/or
  8. #    modify it under the terms of version 2 of the GNU General Public
  9. #    License published by the Free Software Foundation.
  10. #
  11. # ------------------------------------------------------------------
  13.   abi <abi/3.0>,
  15.   include <abstractions/base>
  16.   include <abstractions/fonts>
  17.   include <abstractions/X>
  18.   include <abstractions/freedesktop.org>
  19.   include <abstractions/xdg-desktop>
  20.   include <abstractions/user-tmp>
  21.   include <abstractions/wayland>
  23.   # systemwide gtk defaults
  24.   /etc/gnome/gtkrc*               r,
  25.   /etc/gtk/*                      r,
  26.   /usr/lib{,32,64}/gtk/**         mr,
  27.   /usr/lib/@{multiarch}/gtk/**    mr,
  28.   /usr/lib{,32,64}/gtk-[0-9]*/**  mr,
  29.   /usr/lib/@{multiarch}/gtk-[0-9]*/** mr,
  30.   /usr/share/themes/              r,
  31.   /usr/share/themes/**            r,
  32.   /usr/share/gtk-3.0/settings.ini r,
  34.   # for gnome 1 applications
  35.   /etc/orbitrc                    r,
  37.   # gtk-2 needed some new rights
  38.   /etc/fonts/*                    r,
  39.   /etc/gtk-*/*                    r,
  40.   /etc/pango/*                    r,
  41.   /usr/lib{,32,64}/pango/**       mr,
  42.   /usr/lib{,32,64}/gtk-*/**       mr,
  43.   /usr/lib{,32,64}/gdk-pixbuf-*/** mr,
  44.   /usr/lib/@{multiarch}/pango/**        mr,
  45.   /usr/lib/@{multiarch}/gtk-*/**        mr,
  46.   /usr/lib/@{multiarch}/gdk-pixbuf-*/** mr,
  48.   # per-user gtk configuration
  49.   owner @{HOME}/.config/gtk-3.0/        w,
  50.   owner @{HOME}/.config/gtk-3.0/*       r,
  51.   owner @{HOME}/.gnome/Gnome            r,
  52.   owner @{HOME}/.gtk                    r,
  53.   owner @{HOME}/.gtkrc                  r,
  54.   owner @{HOME}/.gtkrc-2.0              r,
  55.   owner @{HOME}/.gtk-bookmarks          r,
  56.   owner @{HOME}/.themes/                r,
  57.   owner @{HOME}/.themes/**              r,
  58.   owner @{user_share_dirs}/themes/      r,
  59.   owner @{user_share_dirs}/themes/**    r,
  61.   # for gtk file dialog
  62.   owner @{HOME}/.config/gtk-2.0/                    w,
  63.   owner @{HOME}/.config/gtk-2.0/**                  r,
  64.   owner @{HOME}/.config/gtk-2.0/gtkfilechooser.ini* rw,
  66.   # from evolution-mail
  67.   owner @{HOME}/.gconfd/lock/*                      r,
  68.   owner @{HOME}/.gnome/application-info             r,
  70.   # per-user font business
  71.   owner @{HOME}/.fonts.cache-*    rwl,
  73.   # GtkComposeTable
  74.   owner @{HOME}/.cache/gtk-3.0/** r,
  76.   # icon caches
  77.   /var/cache/**/icon-theme.cache  r,
  78.   /usr/share/**/icon-theme.cache  r,
  80.   # GLib schemas
  81.   /usr/{local/,}share/glib-[0-9]*/schemas/   r,
  82.   /usr/{local/,}share/glib-[0-9]*/schemas/** r,
  84.   # GLib / dconf settings
  85.   owner @{HOME}/.config/glib-2.0/settings/keyfile rw,
  87.   # gnome VFS modules
  88.   /etc/gnome-vfs-2.0/modules/ r,
  89.   /etc/gnome-vfs-2.0/modules/* r,
  90.   /usr/lib/gnome-vfs-2.0/modules/*.so mr,
  91.   /usr/lib/@{multiarch}/gnome-vfs-2.0/modules/*.so mr,
  93.   # gvfs
  94.   /usr/share/gvfs/remote-volume-monitors/  r,
  95.   /usr/share/gvfs/remote-volume-monitors/* r,
  96.   @{PROC}/@{pid}/mounts                    r,
  97.   @{run}/mount/utab                        r,
  99.   # printing
  100.   /etc/papersize                   r,
  101.   /etc/cups/lpoptions              r,
  102.   /usr/share/cups/charmaps/**      r,
  104.   # holds MIT-MAGIC-COOKIE for gnome
  105.   owner @{run}/gdm/auth*/database r,
  107.   # mime-types
  108.   /etc/gnome/defaults.list r,
  109.   /etc/xdg/{,*-}mimeapps.list r,
  110.   /usr/share/gnome/applications/ r,
  111.   /usr/share/gnome/applications/mimeinfo.cache r,
  113.   # Allow connecting to the GNOME vfs socket (still need corresponding DBus
  114.   # rules)
  115.   unix (send, receive, connect)
  116.        type=stream
  117.        peer=(addr="@/dbus-vfs-daemon/socket-*"),
  119.   # Include additions to the abstraction
  120.   include if exists <abstractions/gnome.d>