diff --git a/apparmor.d/groups/gnome/gnome-photos-thumbnailer b/apparmor.d/groups/gnome/gnome-photos-thumbnailer new file mode 100644 index 000000000..c58fc2457 --- /dev/null +++ b/apparmor.d/groups/gnome/gnome-photos-thumbnailer @@ -0,0 +1,29 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}lib/gnome-photos-thumbnailer +profile gnome-photos-thumbnailer @{exec_path} { + include + include + + @{exec_path} mr, + + /usr/share/mime/mime.cache r, + + owner @{HOME}/@{XDG_PICTURES_DIR}/{,**} r, + owner @{MOUNTS}/*/@{XDG_PICTURES_DIR}/{,**} r, + + owner @{user_cache_dirs}/babl/{,**} r, + owner @{user_cache_dirs}/gegl-*/{,**} r, + owner @{user_cache_dirs}/gnome-photos/thumbnails/{,**} rw, + owner @{user_share_dirs}/gegl-*/{,**} r, + + owner /dev/shm/DzlCounters-[0-9]* rw, + + include if exists +} \ No newline at end of file diff --git a/dists/flags/main.flags b/dists/flags/main.flags index 7c7ae8095..df7359554 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -44,6 +44,7 @@ gnome-disk-image-mounter complain gnome-disks complain gnome-keyring-daemon complain gnome-music complain +gnome-photos-thumbnailer complain gnome-shell attach_disconnected,complain gnome-shell-hotplug-sniffer complain gnome-system-monitor attach_disconnected,complain