From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Fri, 20 Mar 2026 19:16:32 +0100 Subject: feat: first fully successful run e2e on straper --- .../apparmor.d/abstractions/freedesktop.org | 41 ++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/freedesktop.org (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/freedesktop.org') diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/freedesktop.org b/straper/db/public/apparmor/apparmor.d/abstractions/freedesktop.org new file mode 100644 index 0000000..cb5e1ec --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/freedesktop.org @@ -0,0 +1,41 @@ +# vim:syntax=apparmor +# ------------------------------------------------------------------ +# +# Copyright (C) 2009 Canonical Ltd. +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of version 2 of the GNU General Public +# License published by the Free Software Foundation. +# +# ------------------------------------------------------------------ + + abi , + + # system configuration + @{system_share_dirs}/applications/{**,} r, + @{system_share_dirs}/*ubuntu/applications/{**,} r, + @{system_share_dirs}/gnome/applications/{**,} r, + @{system_share_dirs}/xfce4/applications/{**,} r, + @{system_share_dirs}/icons/{**,} r, + @{system_share_dirs}/pixmaps/{**,} r, + + # this should probably go elsewhere + @{system_share_dirs}/mime/** r, + + @{system_share_dirs}/glib-2.0/schemas/gschemas.compiled r, + + /etc/gnome/defaults.list r, + /etc/xfce4/defaults.list r, + + # per-user configurations + owner @{HOME}/.icons/{,**} r, + owner @{HOME}/.recently-used.xbel* rw, + owner @{HOME}/.local/share/recently-used.xbel* rw, + owner @{HOME}/.config/user-dirs.dirs r, + owner @{HOME}/.config/mimeapps.list r, + owner @{user_share_dirs}/applications/{**,} r, + owner @{user_share_dirs}/icons/{**,} r, + owner @{user_share_dirs}/mime/{**,} r, + + # Include additions to the abstraction + include if exists -- cgit v1.3