diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/abstractions/gio-open | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/gio-open')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/abstractions/gio-open | 59 |
1 files changed, 0 insertions, 59 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/gio-open b/straper/db/public/apparmor/apparmor.d/abstractions/gio-open deleted file mode 100644 index f211717..0000000 --- a/straper/db/public/apparmor/apparmor.d/abstractions/gio-open +++ /dev/null @@ -1,59 +0,0 @@ -# vim:syntax=apparmor - - abi <abi/4.0>, - -# This abstraction is designed to be used in a child profile to limit what -# confined application can invoke via gio helper. -# -# NOTE: most likely you want to use xdg-open abstraction instead for better -# portability across desktop environments, unless you are sure that confined -# application only uses /usr/bin/gio directly. -# -# Usage example: -# -# ``` -# profile foo /usr/bin/foo { -# ... -# /usr/bin/gio rPx -> foo//gio-open, -# ... -# } # end of main profile -# -# # out-of-line child profile -# profile foo//gio-open { -# include <abstractions/gio-open> -# -# # needed for ubuntu-* abstractions -# include <abstractions/ubuntu-helpers> -# -# # Only allow to handle http[s]: and mailto: links -# include <abstractions/ubuntu-browsers> -# include <abstractions/ubuntu-email> -# -# # < add additional allowed applications here > -# } - - include <abstractions/base> - include <abstractions/dbus-session-strict> - - # Main executables - - /usr/bin/gio rix, - /usr/bin/gio-launch-desktop ix, # for OpenSUSE - /usr/lib/@{multiarch}/glib-[0-9]*/gio-launch-desktop ix, - - # System files - - /etc/gnome/defaults.list r, - /usr/share/mime/* r, - /usr/share/{,*/}applications/{,**} r, - /var/cache/gio-[0-9]*.[0-9]*/gnome-mimeapps.list r, - /var/lib/snapd/desktop/applications/{,**} r, - - # User files - - owner @{HOME}/.config/mimeapps.list r, - owner @{HOME}/.local/share/applications/{,*.desktop} r, - owner @{PROC}/@{pid}/fd/ r, - - # Include additions to the abstraction - include if exists <abstractions/gio-open.d> |
