diff --git a/apparmor.d/groups/lxqt/lxqt-runner b/apparmor.d/groups/lxqt/lxqt-runner index c4a708d9f..4dea8c794 100644 --- a/apparmor.d/groups/lxqt/lxqt-runner +++ b/apparmor.d/groups/lxqt/lxqt-runner @@ -3,10 +3,12 @@ # Copyright (C) 2024 Besanon # SPDX-License-Identifier: GPL-2.0-only -#include +abi , + +include @{exec_path} = @{bin}/lxqt-runner -profile lxqt-runner @{exec_path} { +profile lxqt-runner @{exec_path} flags=(complain) { include include include @@ -14,7 +16,7 @@ profile lxqt-runner @{exec_path} { include include include - + @{exec_path} mr, /usr/share/icons/ r, @@ -25,11 +27,11 @@ profile lxqt-runner @{exec_path} { /etc/xdg/menus/lxqt-applications.menu r, # only needed if tor is installed on /opt - owner /opt/tor/tor-browser/Browser/browser/chrome/icons/default/default128.png r, - owner /opt/tormedium/tor-browser/Browser/browser/chrome/icons/default/default128.png r, - owner /opt/mullvad/mullvad-browser/Browser/browser/chrome/icons/default/default128.png r, - + owner /opt/*/**/*.png r, + owner /tmp/{,**} r, /dev/tty rw, + + include if exists }