diff --git a/apparmor.d/groups/lxqt/bleachbit b/apparmor.d/groups/lxqt/bleachbit new file mode 100644 index 000000000..647b51aa2 --- /dev/null +++ b/apparmor.d/groups/lxqt/bleachbit @@ -0,0 +1,58 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +#include + +@{exec_path} = @{bin}/bleachbit +profile bleachbit @{exec_path} { + #include + #include + #include + #include + #include + #include + #include + #include + + ptrace (read), + + @{exec_path} mr, + + /@{HOME}/** rwlk -> /@{HOME}/**, + /@{HOME}/** rw, + /usr/share/ rw, + /usr/share/** rw, + + /usr/share/libfm-qt/translations/libfm-qt_de.qm r, + /usr/share/libdrm/amdgpu.ids r, + + /etc/ r, + /etc/fstab r, + /etc/host.conf r, + /etc/gai.conf r, + + /var/cache/fontconfig/** rw, + owner /var/tmp/etilqs* rwk, + + /opt/{,**} r, + + owner @{PROC}/@{pid}/mountinfo r, + owner @{PROC}/@{pid}/mounts r, + owner @{HOME}/.inputrc r, + owner @{HOME}/.bashrc r, + owner @{HOME}/.bash_profile r, + owner @{HOME}/.bash_logout r, + + owner @{user_config_dirs}/QtProject.conf r, + + owner /tmp/@{int} r, + + @{sys}/devices/@{pci_bus}/{,**} r, + @{sys}/devices/@{pci_bus}/**/**/** r, + + @{PROC}/sys/kernel/random/boot_id r, + + /dev/tty rw, +}