From 5cae18e064f6f3a7eb47b9553af322c781fbb068 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 14 Sep 2025 16:45:54 +0200
Subject: [PATCH] feat(abs): add the gtk-strict abstraction.

---
 apparmor.d/abstractions/desktop          | 2 +-
 apparmor.d/abstractions/gnome-strict     | 2 +-
 apparmor.d/abstractions/gnome.d/complete | 2 +-
 apparmor.d/abstractions/kde-strict       | 2 +-
 apparmor.d/abstractions/lxqt             | 2 +-
 apparmor.d/abstractions/xfce             | 2 +-
 apparmor.d/groups/apt/debconf-frontend   | 2 +-
 apparmor.d/groups/kde/gmenudbusmenuproxy | 1 -
 apparmor.d/groups/kde/kcminit            | 1 -
 apparmor.d/groups/kde/kconf_update       | 1 -
 apparmor.d/groups/kde/kded               | 1 -
 apparmor.d/groups/kde/kwalletd           | 1 -
 apparmor.d/profiles-m-r/obconf           | 2 +-
 13 files changed, 8 insertions(+), 13 deletions(-)

diff --git a/apparmor.d/abstractions/desktop b/apparmor.d/abstractions/desktop
index 3bfbcc887..316e7374e 100644
--- a/apparmor.d/abstractions/desktop
+++ b/apparmor.d/abstractions/desktop
@@ -12,7 +12,7 @@
   include <abstractions/desktop-files>
   include <abstractions/fonts>
   include <abstractions/gschemas>
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
   include <abstractions/icons>
   include <abstractions/mime>
   include <abstractions/qt5>
diff --git a/apparmor.d/abstractions/gnome-strict b/apparmor.d/abstractions/gnome-strict
index 4d2d390ee..a3afccb76 100644
--- a/apparmor.d/abstractions/gnome-strict
+++ b/apparmor.d/abstractions/gnome-strict
@@ -7,7 +7,7 @@
   include <abstractions/desktop-files>
   include <abstractions/fonts>
   include <abstractions/gschemas>
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
   include <abstractions/icons>
   include <abstractions/mime>
   include <abstractions/qt5>
diff --git a/apparmor.d/abstractions/gnome.d/complete b/apparmor.d/abstractions/gnome.d/complete
index 3dece8578..3d4b47f9f 100644
--- a/apparmor.d/abstractions/gnome.d/complete
+++ b/apparmor.d/abstractions/gnome.d/complete
@@ -2,7 +2,7 @@
 # Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
 
   dbus receive bus=session
        interface=org.freedesktop.DBus.Introspectable
diff --git a/apparmor.d/abstractions/kde-strict b/apparmor.d/abstractions/kde-strict
index b448c542d..f00594038 100644
--- a/apparmor.d/abstractions/kde-strict
+++ b/apparmor.d/abstractions/kde-strict
@@ -7,7 +7,7 @@
   include <abstractions/desktop-files>
   include <abstractions/fonts>
   include <abstractions/gschemas>
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
   include <abstractions/icons>
   include <abstractions/mime>
   include <abstractions/qt5>
diff --git a/apparmor.d/abstractions/lxqt b/apparmor.d/abstractions/lxqt
index f20c24a32..ba7347d8c 100644
--- a/apparmor.d/abstractions/lxqt
+++ b/apparmor.d/abstractions/lxqt
@@ -7,7 +7,7 @@
   include <abstractions/fonts>
   include <abstractions/fontconfig-cache-write>
   include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
   include <abstractions/qt5>
   include <abstractions/wayland>
   include <abstractions/X-strict>
diff --git a/apparmor.d/abstractions/xfce b/apparmor.d/abstractions/xfce
index 3046c8f6d..eaf50f6d0 100644
--- a/apparmor.d/abstractions/xfce
+++ b/apparmor.d/abstractions/xfce
@@ -6,7 +6,7 @@
 
   include <abstractions/fonts>
   include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
   include <abstractions/wayland>
   include <abstractions/X-strict>
   include <abstractions/xdg-desktop>
diff --git a/apparmor.d/groups/apt/debconf-frontend b/apparmor.d/groups/apt/debconf-frontend
index 6e80839fe..0a7706fe1 100644
--- a/apparmor.d/groups/apt/debconf-frontend
+++ b/apparmor.d/groups/apt/debconf-frontend
@@ -14,7 +14,7 @@ profile debconf-frontend @{exec_path} flags=(complain) {
   include <abstractions/fontconfig-cache-read>
   include <abstractions/fonts>
   include <abstractions/freedesktop.org>
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
 
   capability dac_read_search,
 
diff --git a/apparmor.d/groups/kde/gmenudbusmenuproxy b/apparmor.d/groups/kde/gmenudbusmenuproxy
index b30e39cdc..f63a83295 100644
--- a/apparmor.d/groups/kde/gmenudbusmenuproxy
+++ b/apparmor.d/groups/kde/gmenudbusmenuproxy
@@ -13,7 +13,6 @@ profile gmenudbusmenuproxy @{exec_path} {
   include <abstractions/bus-session>
   include <abstractions/bus/org.a11y>
   include <abstractions/graphics>
-  include <abstractions/gtk>
   include <abstractions/kde-strict>
   include <abstractions/nameservice-strict>
 
diff --git a/apparmor.d/groups/kde/kcminit b/apparmor.d/groups/kde/kcminit
index 4f8b10a32..59f60c285 100644
--- a/apparmor.d/groups/kde/kcminit
+++ b/apparmor.d/groups/kde/kcminit
@@ -11,7 +11,6 @@ profile kcminit @{exec_path} {
   include <abstractions/base>
   include <abstractions/bus-session>
   include <abstractions/bus/session/org.freedesktop.systemd1>
-  include <abstractions/gtk>
   include <abstractions/kde-strict>
 
   #aa:dbus own bus=session name=org.kde.{KCM,kcm}init path=/kcminit
diff --git a/apparmor.d/groups/kde/kconf_update b/apparmor.d/groups/kde/kconf_update
index ee42fef98..6a01748fd 100644
--- a/apparmor.d/groups/kde/kconf_update
+++ b/apparmor.d/groups/kde/kconf_update
@@ -12,7 +12,6 @@ profile kconf_update @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
   include <abstractions/graphics>
-  include <abstractions/gtk>
   include <abstractions/kde-globals-write>
   include <abstractions/kde-strict>
   include <abstractions/nameservice-strict>
diff --git a/apparmor.d/groups/kde/kded b/apparmor.d/groups/kde/kded
index 2ebc6a5fa..ec5a1ee36 100644
--- a/apparmor.d/groups/kde/kded
+++ b/apparmor.d/groups/kde/kded
@@ -23,7 +23,6 @@ profile kded @{exec_path} {
   include <abstractions/dconf-write>
   include <abstractions/devices-usb>
   include <abstractions/graphics>
-  include <abstractions/gtk>
   include <abstractions/kde-globals-write>
   include <abstractions/kde-strict>
   include <abstractions/nameservice-strict>
diff --git a/apparmor.d/groups/kde/kwalletd b/apparmor.d/groups/kde/kwalletd
index de175635a..baaad7dcb 100644
--- a/apparmor.d/groups/kde/kwalletd
+++ b/apparmor.d/groups/kde/kwalletd
@@ -17,7 +17,6 @@ profile kwalletd @{exec_path} {
   include <abstractions/consoles>
   include <abstractions/fontconfig-cache-read>
   include <abstractions/graphics>
-  include <abstractions/gtk>
   include <abstractions/kde-strict>
   include <abstractions/nameservice-strict>
   include <abstractions/qt5-compose-cache-write>
diff --git a/apparmor.d/profiles-m-r/obconf b/apparmor.d/profiles-m-r/obconf
index 7b11aaac5..d283466f5 100644
--- a/apparmor.d/profiles-m-r/obconf
+++ b/apparmor.d/profiles-m-r/obconf
@@ -11,7 +11,7 @@ include <tunables/global>
 profile obconf @{exec_path} {
   include <abstractions/base>
   include <abstractions/dconf-write>
-  include <abstractions/gtk>
+  include <abstractions/gtk-strict>
   include <abstractions/fonts>
   include <abstractions/fontconfig-cache-read>
   include <abstractions/freedesktop.org>