From 21b46dc8a9affb0441abf206f8169e39e44adf33 Mon Sep 17 00:00:00 2001 From: Besanon Date: Wed, 5 Jun 2024 15:58:11 +0200 Subject: [PATCH] Create lxqt-config-session --- apparmor.d/groups/lxqt/lxqt-config-session | 39 ++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 apparmor.d/groups/lxqt/lxqt-config-session diff --git a/apparmor.d/groups/lxqt/lxqt-config-session b/apparmor.d/groups/lxqt/lxqt-config-session new file mode 100644 index 000000000..4b4441ad3 --- /dev/null +++ b/apparmor.d/groups/lxqt/lxqt-config-session @@ -0,0 +1,39 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +#include + +@{exec_path} = @{bin}/lxqt-config-session +profile lxqt-config-session @{exec_path} { + include + include + include + include + include + include + include + include + + @{exec_path} mr, + + /usr/share/libdrm/amdgpu.ids r, + + /etc/xdg/autostart/ r, + /etc/xdg/autostart/** r, + + owner @{user_config_dirs}/autostart/ r, + owner @{user_config_dirs}/autostart/lxqt-config-monitor-autostart.desktop r, + owner @{user_config_dirs}/lxqt/** rwkl -> @{user_config_dirs}/lxqt/#@{int}, + + owner /tmp/@{int} r, + + @{sys}/devices/@{pci_bus}/{,**} r, + @{sys}/devices/@{pci_bus}/**/**/** r, + + @{PROC}/sys/kernel/random/boot_id r, + + /dev/tty rw, + +}