add Apparmor Pybitmessage.AppImage profile

This commit is contained in:
2022-12-31 13:55:36 +03:00
parent 4a2404c4c9
commit f241fc66a3

View File

@@ -0,0 +1,67 @@
# Last Modified: Sat Dec 31 13:53:53 2022
#include <tunables/global>
/**/PyBitmessage*.AppImage {
#include <abstractions/apparmor_api/find_mountpoint>
#include <abstractions/base>
#include <abstractions/fonts>
#include <abstractions/user-tmp>
capability dac_read_search,
capability sys_admin,
mount fstype=fuse.PyBitmessage*.AppImage options=(ro, nosuid, nodev),
umount,
/dev/fuse rw,
/etc/fuse.conf r,
/etc/gai.conf r,
/etc/host.conf r,
/etc/hosts r,
/etc/nsswitch.conf r,
/etc/python2.7/sitecustomize.py r,
/etc/resolv.conf r,
/etc/xdg/Trolltech.conf rk,
/proc/filesystems r,
/sys/devices/system/cpu/online r,
/tmp/.mount_PyBitm*/ r,
/tmp/.mount_PyBitm*/** r,
/tmp/.mount_PyBitm*/AppRun mrix,
/tmp/.mount_PyBitm*/lib/x86_64-linux-gnu/lib*.so* mr,
/tmp/.mount_PyBitm*/usr/bin/pybitmessage mrix,
/tmp/.mount_PyBitm*/usr/bin/qt.conf mrk,
/tmp/.mount_PyBitm*/usr/lib/python2.7/**.so mr,
/tmp/.mount_PyBitm*/usr/lib/x86_64-linux-gnu/**/lib*.so* mr,
/tmp/.mount_PyBitm*/usr/lib/x86_64-linux-gnu/lib*.so* mr,
/usr/bin/dash mrix,
/usr/bin/fusermount mrix,
/usr/bin/fusermount3 mrix,
/usr/bin/python2.7 r,
/usr/bin/stat mrix,
/usr/sbin/ldconfig mrix,
/usr/share/icons/ r,
/usr/share/icons/Adwaita/* r,
/usr/share/icons/Adwaita/** r,
/usr/share/icons/hicolor/* r,
/usr/share/mime/* r,
/usr/share/pixmaps/ r,
/usr/share/themes/Adwaita/** r,
owner /etc/passwd r,
owner /run/systemd/userdb/ r,
owner /run/user/*/sni-qt_python2_*/ rw,
owner /run/user/*/sni-qt_python2_*/icons/ rw,
owner /usr/local/share/fonts/** r,
owner @{HOME}/.cache/fontconfig/*-le64.cache-7 r,
owner @{HOME}/.config/PyBitmessage/ r,
owner @{HOME}/.config/PyBitmessage/debug.log w,
owner @{HOME}/.config/PyBitmessage/keys.dat rw,
owner @{HOME}/.config/PyBitmessage/keys.dat.*.bak w,
owner @{HOME}/.config/PyBitmessage/knownnodes.dat rw,
owner @{HOME}/.config/PyBitmessage/messages.dat rwk,
owner @{HOME}/.config/PyBitmessage/messages.dat-journal rw,
owner @{HOME}/.config/PyBitmessage/pybitmessageqt.conf rwk,
owner @{HOME}/.config/PyBitmessage/singleton.lock rwk,
owner @{HOME}/.config/Trolltech.conf rwk,
owner /**/PyBitmessage*.AppImage mr,
}