summaryrefslogtreecommitdiff
path: root/data/apparmor
diff options
context:
space:
mode:
authorTyler Hicks <tyhicks@canonical.com>2016-06-04 03:14:23 -0500
committerTyler Hicks <tyhicks@canonical.com>2016-06-04 03:14:23 -0500
commit776b6e9a7b70d2d754f0bb0f9be122e424f3bb2d (patch)
tree1051b404828d3af05fdc7d68f5bf9a3ee5b81a45 /data/apparmor
parent1357af122d6dfb6a238dfa1b5089024e700d4cd0 (diff)
downloadlightdm-git-776b6e9a7b70d2d754f0bb0f9be122e424f3bb2d.tar.gz
Move rules to run fcitx and mozc-server into the lightdm-guest-session
profile instead of keeping them in abstractions. lightdm doesn't depend on fcitx or mozc-server so it can't use abstractions shipped by those packages. (LP: #1581187)
Diffstat (limited to 'data/apparmor')
-rw-r--r--data/apparmor/lightdm-guest-session.in10
1 files changed, 8 insertions, 2 deletions
diff --git a/data/apparmor/lightdm-guest-session.in b/data/apparmor/lightdm-guest-session.in
index d1312ee4..76c24c47 100644
--- a/data/apparmor/lightdm-guest-session.in
+++ b/data/apparmor/lightdm-guest-session.in
@@ -11,8 +11,14 @@
#include <abstractions/lightdm_chromium-browser>
# fcitx and friends needs special treatment due to C/S design
- #include <abstractions/fcitx>
+ /usr/bin/fcitx ix,
+ /tmp/fcitx-socket-* rwl,
+ /dev/shm/* rwl,
+ /usr/bin/fcitx-qimpanel ix,
+ /usr/bin/sogou-qimpanel-watchdog ix,
+ /usr/bin/sogou-sys-notify ix,
+ /tmp/sogou-qimpanel:* rwl,
# mozc_server needs special treatment due to C/S design
- #include <abstractions/mozc_server>
+ unix (bind, listen) type=stream addr="@tmp/.mozc.*",
}