diff --git a/apparmor.d/groups/lxqt/lxqt-panel b/apparmor.d/groups/lxqt/lxqt-panel index 7050d0b7b..f57e7c48f 100644 --- a/apparmor.d/groups/lxqt/lxqt-panel +++ b/apparmor.d/groups/lxqt/lxqt-panel @@ -3,7 +3,7 @@ # Copyright (C) 2024 Besanon # SPDX-License-Identifier: GPL-2.0-only -abi , +abi , include @@ -16,10 +16,6 @@ profile lxqt-panel @{exec_path} { include include - network inet dgram, - network inet stream, - network inet6 dgram, - network inet6 stream, network inet dgram, network inet stream, network netlink raw, @@ -31,7 +27,6 @@ profile lxqt-panel @{exec_path} { @{bin}/nm-connection-editor rPx, @{bin}/xdg-open rPx, @{bin}/ControlPanel rPx, - @{lib}/librewolf/librewolf rPx, /usr/lib{,32,64}/lxqt-panel/*.so mr, # LXQT-Plugins /usr/lib{,32,64}/lxqt-config/*.so mr, # LXQT-Plugins @@ -51,13 +46,18 @@ profile lxqt-panel @{exec_path} { /etc/xdg/ui/uistandards.rc r, /var/lib/dbus/machine-id r, - owner /opt/tor/tor-browser/Browser/browser/chrome/icons/default/default128.png r, + + /opt/tor/tor-browser/Browser/browser/chrome/icons/default/*.png r, + /opt/tormedium/tor-browser/Browser/browser/chrome/icons/default/*.png r, owner @{HOME}/.config/menus/**.menu rw, owner @{HOME}/.config/menus/applications-merged/ r, + owner @{HOME}/Desktop/** r, + owner @{HOME}/Desktop/#@{int} rw, #new + owner @{HOME}/Desktop/*.desktop l -> @{HOME}/Desktop/#@{int}, #new + owner @{HOME}/Desktop/*.desktop rw, #new owner @{HOME}/.local/share/desktop-directories/*.directory r, owner @{HOME}/.local/share/gvfs-metadata/{,*} r, - owner @{HOME}/Desktop/#@{int} rw, owner @{user_config_dirs}/lxqt/#* rw, owner @{user_config_dirs}/lxqt/panel.conf.lock rwk, @@ -72,6 +72,11 @@ profile lxqt-panel @{exec_path} { @{sys}/devices/@{pci_bus}/0000:00:*/ata@{int}/host@{int}/**/**/**/**/**/* r, @{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_{cur,min,max}_freq r, @{sys}/devices/@{pci_bus}/**/**/nvme/nvme0/nvme0n1/nvme0n1p4/uevent r, + @{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/**/host0/target0:0:0/0:0:0:0/block/sda/uevent r, + @{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/**/host0/target0:0:0/0:0:0:0/block/sdb/uevent r, + @{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/**/host0/target0:0:0/0:0:0:0/block/sda/sda2/uevent r, + @{sys}/devices/@{pci_bus}/**/**/usb@{int}/uevent r, + @{sys}/devices/@{pci_bus}/**/**/usb@{int}/**/uevent r, @{sys}/devices/@{pci}/usb1/1-2/1-2:*/host3/target3:0:0/3:0:0:0/block/sdb/uevent r, @{sys}/devices/@{pci}/usb1/1-1/1-1:*/host3/target3:0:0/3:0:0:0/block/sdb/uevent r, @{sys}/devices/@{pci}/usb2/2-2/2-2:*/host4/target4:0:0/4:0:0:0/block/sdc/sdc2/uevent r, @@ -85,7 +90,8 @@ profile lxqt-panel @{exec_path} { /dev/pts/@{int} rw, /dev/snd/controlC@{int} rw, - owner /tmp/#@{int} rw, + deny network inet6 dgram, + deny network inet6 stream, include if exists }