Added apparmor profile. Install icon so it's available for privacy settings
commita289ae10df51ce0a30f23598f67362521c356f53
authorPawel Stolowski <pawel.stolowski@canonical.com>
dateTue 31 May 2016, 12:05 (10 years ago)
parent64d3f31
data/CMakeLists.txt+5
@@ -17,6 +17,11 @@ install(FILES
1717 DESTINATION ${SHELL_APP_DIR}/Dash/
1818 )
1919
20+install(FILES
21+ ${CMAKE_CURRENT_SOURCE_DIR}/${DASH_APP}.png
22+ DESTINATION ${CMAKE_INSTALL_DATADIR}/icons/suru/apps/256
23+ )
24+
2025add_custom_target(pkgversion ALL COMMAND dpkg-parsechangelog -l${CMAKE_SOURCE_DIR}/debian/changelog --show-field version > ${CMAKE_CURRENT_BINARY_DIR}/version)
2126
2227install(FILES com.canonical.Unity8.gschema.xml DESTINATION ${CMAKE_INSTALL_DATADIR}/glib-2.0/schemas)
debian/control+1
@@ -5,6 +5,7 @@ Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
55Build-Depends: cmake,
66 dbus-test-runner,
77 debhelper (>= 9),
8+ dh-apparmor,
89 doxyqml,
910# To allow cross-compiling to work, we also must append :native
1011# to g++ so we don't try to run armhf g++
debian/rules+4
@@ -29,6 +29,10 @@ override_dh_install:
2929 cd $(CURDIR)
3030 dh_install -X'*.pyc' --fail-missing
3131
32+override_dh_installdeb:
33+ dh_apparmor --profile-name=usr.bin.unity8-dash -punity8-dash
34+ dh_installdeb
35+
3236# use private lib directories
3337override_dh_makeshlibs:
3438 dh_makeshlibs -Nunity8-private -Nunity8-fake-env
debian/unity8-common.install+1
@@ -4,4 +4,5 @@ usr/share/unity8/Components
44usr/share/unity8/Dash
55usr/share/unity8/Notifications
66usr/share/unity8/graphics
7+usr/share/icons
78var/lib/polkit-1/localauthority/10-vendor.d
debian/unity8.install+1
@@ -1,3 +1,4 @@
1+debian/usr.bin.unity8-dash etc/apparmor.d
12var/lib/unity8/version
23data/unity8-dash.conf usr/share/upstart/sessions/
34data/unity8-filewatcher.conf usr/share/upstart/sessions/
debian/usr.bin.unity8-dashnew file+21
@@ -0,0 +1,21 @@
1+# vim:syntax=apparmor
2+
3+#include <tunables/global>
4+
5+# v2 compatible wildly permissive profile
6+profile unity8-dash /usr/bin/unity8-dash (attach_disconnected) {
7+ capability,
8+ network,
9+ / rwkl,
10+ /** rwlkm,
11+ /** pix,
12+
13+ mount,
14+ remount,
15+ umount,
16+ pivot_root,
17+ dbus,
18+ signal,
19+ ptrace,
20+ unix,
21+}