aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjappedk <jappesg@gmail.com>2016-03-11 11:03:58 +0100
committerjappedk <jappesg@gmail.com>2016-03-11 11:12:34 +0100
commit9e455ba44707beac8d893091409a997bdf3c459c (patch)
treebe1de841c9b1f73e9f56e54fad537e2ddcc80ed0
parentfb89e8560a8fc4ba4dc1a6a844a48ddb48ffbe5e (diff)
downloadlightdm-remote-session-arctica-9e455ba44707beac8d893091409a997bdf3c459c.tar.gz
lightdm-remote-session-arctica-9e455ba44707beac8d893091409a997bdf3c459c.tar.bz2
lightdm-remote-session-arctica-9e455ba44707beac8d893091409a997bdf3c459c.zip
apparmor: Add various rules (some related to systemd switch) fixing session startup failures on machines using systemd as system-wide service.
-rw-r--r--lightdm-remote-session-x2go.in7
1 files changed, 7 insertions, 0 deletions
diff --git a/lightdm-remote-session-x2go.in b/lightdm-remote-session-x2go.in
index f10d5a8..3c0a55b 100644
--- a/lightdm-remote-session-x2go.in
+++ b/lightdm-remote-session-x2go.in
@@ -63,6 +63,13 @@
# access to kernel's UUID generator (required by pyhoca-cli)
@{PROC}/sys/kernel/random/uuid r,
/var/lib/libuuid/clock.txt rw,
+ /run/systemd/journal/dev-log w,
+ /tmp/**/.x2go-socket r,
+ /tmp/.X11-unix/X[0-9]* wr,
+ /run/uuidd/request w,
+ /proc/sys/kernel/ngroups_max r,
+
+ network,
capability ipc_lock,