Simon Déziel has proposed merging lp:~sdeziel/apparmor/abstractions-improvement
into lp:apparmor.
Requested reviews:
AppArmor Developers (apparmor-dev)
For more details, see:
https://code.launchpad.net/~sdeziel/apparmor/abstractions-improvement/+merge/207475
I'd like to propose some small improvements to the abstractions to make them
more convenient to use and avoid users the need to duplicate some generic rules
* Add some directory read access rules that were missing in
abstractions/{gnome,freedesktop.org}.
* Adapt path for Python 3.{3,4} in abstractions/python
Thanks
--
https://code.launchpad.net/~sdeziel/apparmor/abstractions-improvement/+merge/207475
Your team AppArmor Developers is requested to review the proposed merge of
lp:~sdeziel/apparmor/abstractions-improvement into lp:apparmor.
=== modified file 'profiles/apparmor.d/abstractions/freedesktop.org'
--- profiles/apparmor.d/abstractions/freedesktop.org 2011-01-13 17:13:34 +0000
+++ profiles/apparmor.d/abstractions/freedesktop.org 2014-02-20 15:44:45 +0000
@@ -30,6 +30,7 @@
owner @{HOME}/.recently-used.xbel* rw,
owner @{HOME}/.local/share/recently-used.xbel* rw,
owner @{HOME}/.config/user-dirs.dirs r,
+ owner @{HOME}/.local/share/applications/ r,
owner @{HOME}/.local/share/applications/*.desktop r,
owner @{HOME}/.local/share/applications/defaults.list r,
owner @{HOME}/.local/share/applications/mimeapps.list r,
=== modified file 'profiles/apparmor.d/abstractions/gnome'
--- profiles/apparmor.d/abstractions/gnome 2013-05-30 19:01:27 +0000
+++ profiles/apparmor.d/abstractions/gnome 2014-02-20 15:44:45 +0000
@@ -21,6 +21,7 @@
/etc/gtk/* r,
/usr/lib{,32,64}/gtk/** mr,
/usr/lib/@{multiarch}/gtk/** mr,
+ /usr/share/themes/ r,
/usr/share/themes/** r,
# for gnome 1 applications
@@ -82,4 +83,5 @@
# mime-types
/etc/gnome/defaults.list r,
+ /usr/share/gnome/applications/ r,
/usr/share/gnome/applications/mimeinfo.cache r,
=== modified file 'profiles/apparmor.d/abstractions/python'
--- profiles/apparmor.d/abstractions/python 2014-02-12 20:42:39 +0000
+++ profiles/apparmor.d/abstractions/python 2014-02-20 15:44:45 +0000
@@ -10,18 +10,18 @@
#
# ------------------------------------------------------------------
- /usr/lib{,32,64}/python2.[4567]/**.{pyc,so} mr,
- /usr/lib{,32,64}/python2.[4567]/**.{egg,py,pth} r,
- /usr/lib{,32,64}/python2.[4567]/{site,dist}-packages/ r,
- /usr/lib{,32,64}/python3.[234]/lib-dynload/*.so mr,
+ /usr/lib{,32,64}/python{2,3}.[34567]/**.{pyc,so} mr,
+ /usr/lib{,32,64}/python{2,3}.[34567]/**.{egg,py,pth} r,
+ /usr/lib{,32,64}/python{2,3}.[34567]/{site,dist}-packages/ r,
+ /usr/lib{,32,64}/python3.[234]/lib-dynload/*.so mr,
- /usr/local/lib{,32,64}/python2.[4567]/**.{pyc,so} mr,
- /usr/local/lib{,32,64}/python2.[4567]/**.{egg,py,pth} r,
- /usr/local/lib{,32,64}/python2.[4567]/{site,dist}-packages/ r,
- /usr/local/lib{,32,64}/python3.[234]/lib-dynload/*.so mr,
+ /usr/local/lib{,32,64}/python{2,3}.[34567]/**.{pyc,so} mr,
+ /usr/local/lib{,32,64}/python{2,3}.[34567]/**.{egg,py,pth} r,
+ /usr/local/lib{,32,64}/python{2,3}.[34567]/{site,dist}-packages/ r,
+ /usr/local/lib{,32,64}/python3.[234]/lib-dynload/*.so mr,
# Site-wide configuration
- /etc/python2.[4567]/** r,
+ /etc/python{2,3}.[34567]/** r,
# shared python paths
/usr/share/{pyshared,pycentral,python-support}/** r,
@@ -35,6 +35,3 @@
# python build configuration and headers
/usr/include/python{2,3}.[0-7]*/pyconfig.h r,
-
- # python setup script used by apport
- /etc/python{2,3}.[0-7]*/sitecustomize.py r,
--
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
