summaryrefslogtreecommitdiffstats
path: root/sysui/desktop/apparmor/program.oosplash
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-27 16:51:28 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-27 16:51:28 +0000
commit940b4d1848e8c70ab7642901a68594e8016caffc (patch)
treeeb72f344ee6c3d9b80a7ecc079ea79e9fba8676d /sysui/desktop/apparmor/program.oosplash
parentInitial commit. (diff)
downloadlibreoffice-upstream.tar.xz
libreoffice-upstream.zip
Adding upstream version 1:7.0.4.upstream/1%7.0.4upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r--sysui/desktop/apparmor/program.oosplash36
1 files changed, 36 insertions, 0 deletions
diff --git a/sysui/desktop/apparmor/program.oosplash b/sysui/desktop/apparmor/program.oosplash
new file mode 100644
index 000000000..bcc06914d
--- /dev/null
+++ b/sysui/desktop/apparmor/program.oosplash
@@ -0,0 +1,36 @@
+# ------------------------------------------------------------------
+#
+# Copyright (C) 2016 Canonical Ltd.
+# Copyright (C) 2018 Software in the Public Interest, Inc.
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+#
+# Author: Bryan Quigley <bryan.quigley@canonical.com>
+# Rene Engelhard <rene@debian.org>
+#
+# ------------------------------------------------------------------
+
+#include <tunables/global>
+
+profile libreoffice-oopslash INSTDIR-program/oosplash {
+ #include <abstractions/base>
+ #include <abstractions/X>
+
+ /etc/libreoffice/ r,
+ /etc/libreoffice/** r,
+ /etc/passwd r,
+ /etc/nsswitch.conf r,
+ /run/nscd/passwd r,
+ /sys/devices/{virtual,pci[0-9]*}/**/queue/rotational r, # for isRotational() in desktop/unx/source/pagein.c
+ /usr/lib{,32,64}/ure/bin/javaldx rmpux,
+ /usr/share/libreoffice/program/* r,
+ INSTDIR-program/** r,
+ INSTDIR-program/soffice.bin rmpx,
+ INSTDIR-program/javaldx rmpux,
+ owner @{HOME}/.Xauthority r,
+ owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw,
+ unix peer=(addr=@/tmp/.ICE-unix/* label=unconfined),
+ unix peer=(addr=@/tmp/.X11-unix/* label=unconfined),
+}