From 6c40764dbfe61556fec2b2db5892e0656eeeecf4 Mon Sep 17 00:00:00 2001 From: Besanon Date: Wed, 5 Jun 2024 15:59:42 +0200 Subject: [PATCH] Create lxqt-leave --- apparmor.d/groups/lxqt/lxqt-leave | 32 +++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 apparmor.d/groups/lxqt/lxqt-leave diff --git a/apparmor.d/groups/lxqt/lxqt-leave b/apparmor.d/groups/lxqt/lxqt-leave new file mode 100644 index 000000000..24de0267a --- /dev/null +++ b/apparmor.d/groups/lxqt/lxqt-leave @@ -0,0 +1,32 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +#include + +@{exec_path} = @{bin}/lxqt-leave +profile lxqt-leave @{exec_path} { + include + include + include + include + include + include + include + include + + signal (receive) set=(term) peer=lxqt-session, + + @{exec_path} mr, + + /usr/share/libdrm/amdgpu.ids r, + + @{sys}/devices/@{pci_bus}/{,**} r, + @{sys}/devices/@{pci_bus}/**/**/** r, + + owner /tmp/{,**} r, + + /dev/tty rw, + +}