From 649f7f4cf20ab02f3e534efee36edaa91b7073ff Mon Sep 17 00:00:00 2001
From: curiosityseeker <60518106+curiosityseeker@users.noreply.github.com>
Date: Thu, 10 Oct 2024 14:21:42 +0200
Subject: [PATCH] Update xembedsniproxy

profile xembedsniproxy {
  /usr/share/drirc.d/ r,
  /usr/share/drirc.d/00-mesa-defaults.conf r,
  /usr/share/drirc.d/00-radv-defaults.conf r,

  owner @{user_cache_dirs}/mesa_shader_cache_db/index rw,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part0/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part0/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part1/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part1/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part10/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part10/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part11/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part11/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part12/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part12/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part13/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part13/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part14/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part14/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part15/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part15/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part16/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part16/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part17/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part17/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part18/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part18/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part19/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part19/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part2/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part2/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part20/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part20/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part21/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part21/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part22/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part22/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part23/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part23/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part24/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part24/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part25/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part25/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part26/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part26/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part27/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part27/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part28/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part28/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part29/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part29/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part3/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part3/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part30/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part30/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part31/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part31/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part32/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part32/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part33/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part33/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part34/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part34/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part35/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part35/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part36/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part36/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part37/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part37/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part38/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part38/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part39/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part39/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part4/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part4/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part40/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part40/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part41/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part41/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part42/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part42/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part43/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part43/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part44/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part44/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part45/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part45/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part46/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part46/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part47/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part47/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part48/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part48/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part49/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part49/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part5/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part5/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part6/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part6/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part7/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part7/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part8/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part8/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part9/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part9/mesa_cache.idx k,

  @{sys}/devices/@{pci}/device r,
  @{sys}/devices/@{pci}/revision r,
  @{sys}/devices/@{pci}/subsystem_device r,
  @{sys}/devices/@{pci}/subsystem_vendor r,
  @{sys}/devices/@{pci}/uevent r,
  @{sys}/devices/@{pci}/vendor r,

  @{PROC}/sys/dev/i915/perf_stream_paranoid r,

  /dev/dri/ r,
  /dev/dri/renderD128 rw,
}
---
 apparmor.d/groups/kde/xembedsniproxy | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apparmor.d/groups/kde/xembedsniproxy b/apparmor.d/groups/kde/xembedsniproxy
index dc6b215f2..df5e69bcc 100644
--- a/apparmor.d/groups/kde/xembedsniproxy
+++ b/apparmor.d/groups/kde/xembedsniproxy
@@ -10,6 +10,7 @@ include <tunables/global>
 profile xembedsniproxy @{exec_path} {
   include <abstractions/base>
   include <abstractions/fonts>
+  include <abstractions/graphics>
   include <abstractions/nameservice-strict>
   include <abstractions/qt5>
 
@@ -22,6 +23,8 @@ profile xembedsniproxy @{exec_path} {
 
   @{run}/user/@{uid}/xauth_@{rand6} rl,
 
+  /dev/tty r,
+
   include if exists <local/xembedsniproxy>
 }