diff --git a/apparmor.d/groups/lxqt/lxqt-config-monitor b/apparmor.d/groups/lxqt/lxqt-config-monitor index de02575ec..482cdcd71 100644 --- a/apparmor.d/groups/lxqt/lxqt-config-monitor +++ b/apparmor.d/groups/lxqt/lxqt-config-monitor @@ -3,7 +3,7 @@ # Copyright (C) 2024 Besanon # SPDX-License-Identifier: GPL-2.0-only -abi , +abi , include @@ -14,16 +14,26 @@ profile lxqt-config-monitor @{exec_path} { include include include - include - include + include + include include + include signal (read) set=(kill,term) peer=lxqt-session, - @{exec_path} mr, - - /var/cache/fontconfig/ rw, + @{exec_pathl} mr, + owner @{user_config_dirs}/autostart/lxqt-config-monitor-autostart.desktop rw, + owner @{user_config_dirs}/lxqt/ r, + owner @{user_config_dirs}/lxqt/#@{int} rwk, + owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf l -> @{user_config_dirs}/lxqt/#@{int}, + owner @{user_config_dirs}/lxqt/lxqt.conf.lock rwk, + owner @{user_config_dirs}/lxqt/lxqt.conf.@{rand6} rw, + owner @{user_config_dirs}/lxqt/lxqt.conf.@{rand6} l -> @{user_config_dirs}/lxqt/#*, + owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf.lock rwk, + owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf.@{rand6} rw, + owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf.@{rand6} l -> @{user_config_dirs}/lxqt/#@{int}, + owner /tmp/@{int} r, /dev/tty rw,