diff --git a/apparmor.d/groups/lxqt/lxqt-admin-user b/apparmor.d/groups/lxqt/lxqt-admin-user new file mode 100644 index 000000000..3bb02dd5e --- /dev/null +++ b/apparmor.d/groups/lxqt/lxqt-admin-user @@ -0,0 +1,34 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/lxqt-admin-user +profile lxqt-admin-user @{exec_path} { + include + include + include + include + include + include + include + include + include + + @{exec_path} mr, + + @{bin}/pkexec rPx, + @{bin}/usermod rPx, + + owner /tmp/@{int} r, + + /dev/tty rw, + + include if exists +} + +# vim:syntax=apparmor