From 3a52e4d75f0dcdf177acdabed625af6490b8e11a Mon Sep 17 00:00:00 2001
From: Besanon <m231009ts@mailfence.com>
Date: Wed, 28 Aug 2024 11:28:08 +0200
Subject: [PATCH] Create lxqt-admin-user

---
 apparmor.d/groups/lxqt/lxqt-admin-user | 34 ++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 apparmor.d/groups/lxqt/lxqt-admin-user

diff --git a/apparmor.d/groups/lxqt/lxqt-admin-user b/apparmor.d/groups/lxqt/lxqt-admin-user
new file mode 100644
index 000000000..3bb02dd5e
--- /dev/null
+++ b/apparmor.d/groups/lxqt/lxqt-admin-user
@@ -0,0 +1,34 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2024 Besanon  <m231009ts@mailfence.com>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/lxqt-admin-user
+profile lxqt-admin-user @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/gtk>
+  include <abstractions/video>
+  include <abstractions/lxqt>
+  include <abstractions/qt5-shader-cache>
+  include <abstractions/bus-accessibility>
+  include <abstractions/bus-session>
+  include <abstractions/gvfs-open>
+  include <abstractions/nameservice-strict>
+  
+  @{exec_path}			mr,
+
+  @{bin}/pkexec				rPx,
+  @{bin}/usermod 			rPx,
+
+  owner /tmp/@{int}             	r,
+
+  /dev/tty				rw,
+
+  include if exists <local/lxqt-admin-user>
+}
+
+# vim:syntax=apparmor