[game-data-packager] 03/10: AppArmor: allow gdp-openurl script as an alternative to xdg-open

[Simon McVittie]

This is an automated email from the git hooks/post-receive script.

smcv pushed a commit to branch quake
in repository game-data-packager.

commit 2cb895f6dd5cc382a8ca5e72c9ca120f613d96a5
Author: Simon McVittie <smcv at debian.org>
Date:   Sun Oct 9 23:28:57 2016 +0100

    AppArmor: allow gdp-openurl script as an alternative to xdg-open
---
 debian/apparmor.d/usr.lib.quake4.quake4.x86 | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/debian/apparmor.d/usr.lib.quake4.quake4.x86 b/debian/apparmor.d/usr.lib.quake4.quake4.x86
index 3b502f2..c75387f 100644
--- a/debian/apparmor.d/usr.lib.quake4.quake4.x86
+++ b/debian/apparmor.d/usr.lib.quake4.quake4.x86
@@ -42,13 +42,20 @@
   /run/udev/data/c226:* r,
 
   /usr/bin/xdg-open Cxr -> xdgopen,
+  /usr/share/games/game-data-packager-runtime/gdp-openurl Cxr -> xdgopen,
 
   profile xdgopen flags=(complain) {
     #include <abstractions/base>
+    #include <abstractions/dbus-session-strict>
     #include <abstractions/ubuntu-browsers>
     #include <abstractions/ubuntu-helpers>
+
     /usr/bin/xdg-open rm,
     /{usr/,}bin/dash rmix,
+
+    /usr/share/games/game-data-packager-runtime/gdp-openurl rm,
+    /usr/bin/python3 rmix,
+    dbus (send) bus=session peer=(name=org.freedesktop.portal.Desktop),
   }
 }
 
@@ -72,6 +79,9 @@
   owner @{HOME}/.quake4/** rwk,
   owner @{HOME}/.quake4/*/gamex86.so rwkm,
 
+  # used by PulseAudio
+  /etc/machine-id r,
+
   # the audio and X abstractions don't allow mmapping these
   /dev/dri/* m,
   owner /{run,dev}/shm/pulse-shm* m,
@@ -87,12 +97,19 @@
   /run/udev/data/c226:* r,
 
   /usr/bin/xdg-open Cxr -> xdgopen,
+  /usr/share/games/game-data-packager-runtime/gdp-openurl Cxr -> xdgopen,
 
   profile xdgopen flags=(complain) {
     #include <abstractions/base>
+    #include <abstractions/dbus-session-strict>
     #include <abstractions/ubuntu-browsers>
     #include <abstractions/ubuntu-helpers>
+
     /usr/bin/xdg-open rm,
     /{usr/,}bin/dash rmix,
+
+    /usr/share/games/game-data-packager-runtime/gdp-openurl rm,
+    /usr/bin/python3 rmix,
+    dbus (send) bus=session peer=(name=org.freedesktop.portal.Desktop),
   }
 }

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-games/game-data-packager.git