diff --git a/apparmor.d/groups/lxqt/pcmanfm-qt b/apparmor.d/groups/lxqt/pcmanfm-qt index 1e5e78f7d..39e5d5980 100644 --- a/apparmor.d/groups/lxqt/pcmanfm-qt +++ b/apparmor.d/groups/lxqt/pcmanfm-qt @@ -34,21 +34,21 @@ profile pcmanfm-qt @{exec_path} { @{lib}/menu-cache/menu-cached rix, @{lib}/exec/menu-cache/menu-cache-gen rix, - #aa:lint ignore=too-wide - # Full access to user's data - / r, - /*/ r, - @{bin}/ r, - @{lib}/ r, - @{MOUNTDIRS}/ r, - @{MOUNTS}/ r, - @{MOUNTS}/** rw, - owner @{HOME}/ r, - owner @{HOME}/** rw, - owner @{run}/user/@{uid}/ r, - owner @{run}/user/@{uid}/** rw, - owner @{tmp}/ r, - owner @{tmp}/** rw, + #aa:lint ignore=too-wide + # Full access to user's data + / r, + /*/ r, + @{bin}/ r, + @{lib}/ r, + @{MOUNTDIRS}/ r, + @{MOUNTS}/ r, + @{MOUNTS}/** rw, + owner @{HOME}/ r, + owner @{HOME}/** rw, + owner @{run}/user/@{uid}/ r, + owner @{run}/user/@{uid}/** rw, + owner @{tmp}/ r, + owner @{tmp}/** rw, owner @{user_cache_dirs}/pcmanfm-qt/{,**} rw, owner @{user_config_dirs}/pcmanfm-qt/ rw, @@ -65,12 +65,12 @@ profile pcmanfm-qt @{exec_path} { owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/cgroup r, - # Silence non user's data - deny @{efi}/{,**} r, - deny /opt/{,**} r, - deny /root/{,**} r, - deny /tmp/.* rw, - deny /tmp/.*/{,**} rw, + # Silence non user's data + deny @{efi}/{,**} r, + deny /opt/{,**} r, + deny /root/{,**} r, + deny /tmp/.* rw, + deny /tmp/.*/{,**} rw, /dev/tty r,