Dominique Leuenberger
d45d56f0b4
- allow sessions of greeter style seats also to be read. bnc#893081 OBS-URL: https://build.opensuse.org/request/show/245737 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/colord?expand=0&rev=104
50 lines
1.5 KiB
Plaintext
50 lines
1.5 KiB
Plaintext
# Last Modified: Thu Oct 17 14:07:52 2013
|
|
#include <tunables/global>
|
|
|
|
/usr/lib/colord (attach_disconnected) {
|
|
#include <abstractions/base>
|
|
#include <abstractions/nameservice>
|
|
|
|
|
|
deny /usr/share/gvfs/remote-volume-monitors/ r,
|
|
deny /usr/share/gvfs/remote-volume-monitors/afc.monitor r,
|
|
deny /usr/share/gvfs/remote-volume-monitors/udisks2.monitor r,
|
|
|
|
/etc/colord.conf r,
|
|
/etc/fstab r,
|
|
/etc/udev/udev.conf r,
|
|
/proc/*/mounts r,
|
|
/proc/*/cgroup r,
|
|
/proc/*/cmdline r, # not only @{pid}, bnc#846301
|
|
/run/systemd/sessions/[0-9]* r,
|
|
/run/systemd/sessions/c[0-9]* r,
|
|
/run/udev/data/* r,
|
|
/sys/bus/ r,
|
|
/sys/bus/usb/devices/ r,
|
|
/sys/class/ r,
|
|
/sys/class/drm/ r,
|
|
/sys/class/video4linux/** r,
|
|
/sys/class/video4linux/ r,
|
|
/sys/devices/** r,
|
|
/usr/lib/colord mr,
|
|
/usr/local/share/mime/** r,
|
|
/usr/share/color/**/ r,
|
|
/usr/share/color/icc/** r,
|
|
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Device.xml r,
|
|
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Profile.xml r,
|
|
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.Sensor.xml r,
|
|
/usr/share/dbus-1/interfaces/org.freedesktop.ColorManager.xml r,
|
|
/usr/share/gvfs/remote-volume-monitors/gphoto2.monitor r,
|
|
/usr/share/locale-bundle/**.mo r,
|
|
/usr/share/mime/** r,
|
|
/var/lib/color/icc/ r,
|
|
/var/lib/colord/mapping.db rwk,
|
|
/var/lib/colord/mapping.db-journal rw,
|
|
/var/lib/colord/storage.db rwk,
|
|
/var/lib/colord/storage.db-journal rw,
|
|
|
|
@{HOME}/.local/share/icc/*.icc r,
|
|
@{HOME}/.local/share/color/icc/*.icc r,
|
|
/var/lib/gdm/.local/share/icc/*.icc r,
|
|
}
|