From 2ea558c1464ad9a17096e1bffcf94a31b35d81f4 Mon Sep 17 00:00:00 2001
From: REmerald <55359236+REmerald@users.noreply.github.com>
Date: Thu, 6 Jun 2024 09:43:23 +0000
Subject: [PATCH] fix(xdg-document-portal): use
 `abstractions/nameservice-strict`

---
 apparmor.d/groups/freedesktop/xdg-document-portal | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/apparmor.d/groups/freedesktop/xdg-document-portal b/apparmor.d/groups/freedesktop/xdg-document-portal
index 9a2e0a43a..54104e51d 100644
--- a/apparmor.d/groups/freedesktop/xdg-document-portal
+++ b/apparmor.d/groups/freedesktop/xdg-document-portal
@@ -12,6 +12,7 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
   include <abstractions/bus-session>
   include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
   include <abstractions/deny-sensitive-home>
+  include <abstractions/nameservice-strict>
 
   capability sys_admin,
   capability sys_nice,
@@ -35,9 +36,6 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
-  /etc/nsswitch.conf r,
-  /etc/passwd r,
-
   @{bin}/flatpak         rPUx,
   @{bin}/fusermount{,3}  rCx -> fusermount,