colord/usr.lib.colord
Dominique Leuenberger 2bfdfe89c6 Accepting request 155749 from home:abergmann:branches:GNOME:Factory
- Adjusted last editions to AppAmor profile. (bnc#803281) 
  Replaced
  - @{HOME}/.local/share/color/*.icc r
  with
  - @{HOME}/.local/share/color/icc/*.icc r
  Added
  allow reading all /sys/class/video4linux/ r

OBS-URL: https://build.opensuse.org/request/show/155749
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/colord?expand=0&rev=59
2013-02-18 21:15:52 +00:00

44 lines
1.3 KiB
Plaintext

# Last Modified: Thu Jul 5 16:42:52 2012
#include <tunables/global>
/usr/lib/colord {
#include <abstractions/base>
#include <abstractions/nameservice>
deny /usr/share/gvfs/remote-volume-monitors/ r,
deny /usr/share/gvfs/remote-volume-monitors/afc.monitor r,
deny /usr/share/gvfs/remote-volume-monitors/udisks2.monitor r,
/etc/colord.conf r,
/etc/fstab r,
/etc/udev/udev.conf r,
/proc/*/mounts r,
/proc/*/cgroup r,
/run/udev/data/* r,
/sys/bus/ r,
/sys/bus/usb/devices/ r,
/sys/class/ r,
/sys/class/video4linux/** r,
/sys/class/video4linux/ r,
/sys/devices/** r,
/usr/lib/colord mr,
/usr/share/color/**/ r,
/usr/share/color/icc/** r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Device.xml r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Profile.xml r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Sensor.xml r,
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.xml r,
/usr/share/gvfs/remote-volume-monitors/gphoto2.monitor r,
/usr/share/locale-bundle/**.mo r,
/usr/share/mime/** r,
/var/lib/color/icc/ r,
/var/lib/colord/mapping.db rwk,
/var/lib/colord/mapping.db-journal rw,
/var/lib/colord/storage.db rwk,
/var/lib/colord/storage.db-journal rw,
@{HOME}/.local/share/icc/*.icc r,
@{HOME}/.local/share/color/icc/*.icc r,
}