diff --git a/apparmor.d/groups/gvfs/gvfsd-dnssd b/apparmor.d/groups/gvfs/gvfsd-dnssd index 2f3b8d8f2..fd9b5a22d 100644 --- a/apparmor.d/groups/gvfs/gvfsd-dnssd +++ b/apparmor.d/groups/gvfs/gvfsd-dnssd @@ -13,7 +13,6 @@ profile gvfsd-dnssd @{exec_path} { include include include - include #aa:dbus own bus=session name=org.gtk.vfs.mountpoint_dnssd #aa:dbus talk bus=session name=org.gtk.vfs.MountTracker label=gvfsd diff --git a/apparmor.d/groups/gvfs/gvfsd-recent b/apparmor.d/groups/gvfs/gvfsd-recent index 03586b291..1ec5f2e60 100644 --- a/apparmor.d/groups/gvfs/gvfsd-recent +++ b/apparmor.d/groups/gvfs/gvfsd-recent @@ -36,8 +36,8 @@ profile gvfsd-recent @{exec_path} { @{exec_path} mr, # Full access to user's data - owner @{HOME}/{,**} rw, # FIXME: ? - owner @{MOUNTS}/{,**} rw, + owner @{HOME}/{,**} r, + owner @{MOUNTS}/{,**} r, owner @{HOME}/.zshenv r, owner @{user_share_dirs}/gvfs-metadata/{,*} r, diff --git a/apparmor.d/groups/gvfs/gvfsd-wsdd b/apparmor.d/groups/gvfs/gvfsd-wsdd index b88d36b18..6c29d9680 100644 --- a/apparmor.d/groups/gvfs/gvfsd-wsdd +++ b/apparmor.d/groups/gvfs/gvfsd-wsdd @@ -14,6 +14,7 @@ profile gvfsd-wsdd @{exec_path} { network netlink raw, #aa:dbus own bus=session name=org.gtk.vfs.mountpoint_wsdd + #aa:dbus talk bus=session name=org.gtk.vfs.MountTracker label=gvfsd @{exec_path} mr,