summaryrefslogtreecommitdiffstats
path: root/sysui/desktop/apparmor/program.oosplash
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 09:06:44 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-07 09:06:44 +0000
commited5640d8b587fbcfed7dd7967f3de04b37a76f26 (patch)
tree7a5f7c6c9d02226d7471cb3cc8fbbf631b415303 /sysui/desktop/apparmor/program.oosplash
parentInitial commit. (diff)
downloadlibreoffice-upstream.tar.xz
libreoffice-upstream.zip
Adding upstream version 4:7.4.7.upstream/4%7.4.7upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r--sysui/desktop/apparmor/program.oosplash36
1 files changed, 36 insertions, 0 deletions
diff --git a/sysui/desktop/apparmor/program.oosplash b/sysui/desktop/apparmor/program.oosplash
new file mode 100644
index 000000000..dd1136bc9
--- /dev/null
+++ b/sysui/desktop/apparmor/program.oosplash
@@ -0,0 +1,36 @@
+# ------------------------------------------------------------------
+#
+# Copyright (C) 2016 Canonical Ltd.
+# Copyright (C) 2018 Software in the Public Interest, Inc.
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+#
+# Author: Bryan Quigley <bryan.quigley@canonical.com>
+# Rene Engelhard <rene@debian.org>
+#
+# ------------------------------------------------------------------
+
+#include <tunables/global>
+
+profile libreoffice-oosplash INSTDIR-program/oosplash {
+ #include <abstractions/base>
+ #include <abstractions/X>
+
+ /etc/libreoffice/ r,
+ /etc/libreoffice/** r,
+ /etc/passwd r,
+ /etc/nsswitch.conf r,
+ /run/nscd/passwd r,
+ /sys/devices/{virtual,pci[0-9]*}/**/queue/rotational r, # for isRotational() in desktop/unx/source/pagein.c
+ /usr/lib{,32,64}/ure/bin/javaldx rmpux,
+ /usr/share/libreoffice/program/* r,
+ INSTDIR-program/** r,
+ INSTDIR-program/soffice.bin rmpx,
+ INSTDIR-program/javaldx rmpux,
+ owner @{HOME}/.Xauthority r,
+ owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw,
+ unix peer=(addr=@/tmp/.ICE-unix/* label=unconfined),
+ unix peer=(addr=@/tmp/.X11-unix/* label=unconfined),
+}