diff --git a/apparmor.d/groups/kde/startplasma b/apparmor.d/groups/kde/startplasma index 0b86cf239..b180a1a36 100644 --- a/apparmor.d/groups/kde/startplasma +++ b/apparmor.d/groups/kde/startplasma @@ -13,6 +13,8 @@ profile startplasma @{exec_path} { include include + signal (receive) set=(term) peer=sddm, + @{exec_path} mr, @{bin}/kapplymousetheme rPUx, @@ -39,7 +41,7 @@ profile startplasma @{exec_path} { owner @{user_cache_dirs}/ rw, owner @{user_cache_dirs}/#@{int} rw, owner @{user_cache_dirs}/kcrash-metadata/ rw, - owner @{user_cache_dirs}/ksycoca5_* rwkl, + owner @{user_cache_dirs}/ksycoca5* rwkl -> @{user_cache_dirs}/#@{int}, owner @{user_cache_dirs}/plasma-svgelements rw, owner @{user_config_dirs}/#@{int} rw, @@ -52,10 +54,11 @@ profile startplasma @{exec_path} { owner @{user_config_dirs}/ksplashrc r, owner @{user_config_dirs}/kwinkdeglobalsrc.lock rwk, owner @{user_config_dirs}/menus/ r, - owner @{user_config_dirs}/menus/applications-merged/ r, + owner @{user_config_dirs}/menus/applications-merged/{,*.menu} r, owner @{user_config_dirs}/plasma-localerc rwl, owner @{user_config_dirs}/plasma-localerc.lock rwk, owner @{user_config_dirs}/plasma-workspace/env/ r, + owner @{user_config_dirs}/startkderc r, owner @{user_config_dirs}/Trolltech.conf rwl, owner @{user_config_dirs}/Trolltech.conf.lock rwk, owner @{user_share_dirs}/kservices5/{,**} r, @@ -72,6 +75,7 @@ profile startplasma @{exec_path} { @{PROC}/sys/kernel/random/boot_id r, /dev/tty r, + /dev/tty@{int} rw, include if exists }