[apparmor] [PATCH 1/2] add new xdg-desktop abstraction

[Steve Beattie]

On Wed, Jan 11, 2012 at 12:45:36PM +0100, Jamie Strandboge wrote:
> A bug[1] was filed in Ubuntu to add the following to the audio
> abstraction:
> @{HOME}/.config rw,
> 
> The logic was that in the audio abstraction we have the following:
> @{HOME}/.cache/event-sound-cache.* rw,
> 
> so the logic follows that if this rule is in the abstraction, then
> if .config didn't exist, it must be created. While I understand the
> reasoning, it didn't feel quite right, so Steve, John and I discussed
> this and came up with the idea that we should create an xdg-desktop
> abstraction based on the upstream documentation[2]. Attached patch adds
> this abstraction.

Acked-By: Steve Beattie <sbeattie at ubuntu.com>

> [1]https://launchpad.net/bugs/914386
> [2]http://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html
> 
> -- 
> Jamie Strandboge             | http://www.canonical.com

> === added file 'profiles/apparmor.d/abstractions/xdg-desktop'
> --- profiles/apparmor.d/abstractions/xdg-desktop	1970-01-01 00:00:00 +0000
> +++ profiles/apparmor.d/abstractions/xdg-desktop	2012-01-11 11:07:19 +0000
> @@ -0,0 +1,24 @@
> +# vim:syntax=apparmor
> +# ------------------------------------------------------------------
> +#
> +#    Copyright (C) 2012 Canonical Ltd.
> +#
> +#    This program is free software; you can redistribute it and/or
> +#    modify it under the terms of version 2 of the GNU General Public
> +#    License published by the Free Software Foundation.
> +#
> +# ------------------------------------------------------------------
> +
> +  # Entries based on:
> +  # http://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html
> +
> +  owner @{HOME}/.cache/ rw,
> +
> +  owner @{HOME}/.config/ rw,
> +
> +  owner @{HOME}/.local/ rw,
> +  owner @{HOME}/.local/share/ rw,
> +
> +  # fallbacks
> +  /usr/share/ r,
> +  /usr/local/share/ r,

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20120111/bb32d3dd/attachment.pgp>