aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/abstractions/dconf
diff options
context:
space:
mode:
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/dconf')
-rw-r--r--straper/db/public/apparmor/apparmor.d/abstractions/dconf14
1 files changed, 14 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/dconf b/straper/db/public/apparmor/apparmor.d/abstractions/dconf
new file mode 100644
index 0000000..959cfd4
--- /dev/null
+++ b/straper/db/public/apparmor/apparmor.d/abstractions/dconf
@@ -0,0 +1,14 @@
+# vim:syntax=apparmor
+
+ abi <abi/4.0>,
+
+# permissions for querying dconf settings; granting write access should
+# be specified in a specific application's profile.
+
+ @{etc_ro}/dconf/** r,
+ # TODO: make w conditional when an override is available, so it can be moved to a portal.
+ owner @{run}/user/*/dconf/user rw,
+ owner @{HOME}/.config/dconf/user r,
+
+ # Include additions to the abstraction
+ include if exists <abstractions/dconf.d>