diff --git a/apparmor.d/groups/kde/kwin_wayland b/apparmor.d/groups/kde/kwin_wayland index fb3bbf662..c428bcaec 100644 --- a/apparmor.d/groups/kde/kwin_wayland +++ b/apparmor.d/groups/kde/kwin_wayland @@ -32,7 +32,10 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) { @{bin}/plasmashell r, @{bin}/Xwayland rPx, @{lib}/kscreenlocker_greet rPx, + @{lib}/kwin_killer_helper rix, + /usr/share/color-schemes/*.colors r, + /usr/share/desktop-directories/*.directory r, /usr/share/hwdata/pnp.ids r, /usr/share/kglobalaccel/{,**} r, /usr/share/knotifications5/ksmserver.notifyrc r, @@ -40,7 +43,7 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) { /usr/share/kservicetypes5/{,*.desktop} r, /usr/share/kwin/{,**} r, /usr/share/libinput/{,**} r, - /usr/share/plasma/desktoptheme/default/{metadata.json,plasmarc} r, + /usr/share/plasma/desktoptheme/default/** r, /usr/share/qt/translations/*.qm r, /usr/share/X11/xkb/{,**} r, @@ -48,9 +51,7 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) { /etc/xdg/menus/{,applications.menu} r, /etc/pipewire/client.conf.d/ r, /usr/share/pipewire/client.conf r, - /usr/share/plasma/desktoptheme/default/** r, - /usr/share/desktop-directories/*.directory r, - + owner /var/lib/sddm/.cache/#@{int} rwk, owner /var/lib/sddm/.cache/fontconfig/* rwk, owner /var/lib/sddm/.cache/fontconfig/*-le64.cache-@{int}{,TMP-@{rand6},NEW,LCK} w, @@ -60,6 +61,7 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) { owner /var/lib/sddm/.cache/ksycoca5_* rwkl -> /var/lib/sddm/.cache/#@{int}, owner /var/lib/sddm/.config/#@{int} rw, + owner /var/lib/sddm/.config/kcminputrc r, owner /var/lib/sddm/.config/kdeglobals r, owner /var/lib/sddm/.config/kglobalshortcutsrc.lock rwk, owner /var/lib/sddm/.config/kglobalshortcutsrc{,.@{rand6}} rwl -> /var/lib/sddm/.config/#@{int}, @@ -70,11 +72,12 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) { owner @{user_cache_dirs}/#@{int} rw, owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/ksycoca5_* r, + owner @{user_cache_dirs}/ksycoca5_* rwkl -> @{user_cache_dirs}/#@{int}, owner @{user_cache_dirs}/kwin/qmlcache/*.qmlc rw, owner @{user_cache_dirs}/kwin/qmlcache/*.qmlc.@{rand6} rwl -> @{user_cache_dirs}/kwin/qmlcache/#@{int}, owner @{user_cache_dirs}/kwin/qmlcache/#@{int} rw, owner @{user_cache_dirs}/plasma_theme_default_v*.kcache rw, - owner @{user_cache_dirs}/plasma-svgelements r, + owner @{user_cache_dirs}/plasma-svgelements rw, owner @{user_cache_dirs}/plasma-svgelements.@{rand6} rwl -> @{user_cache_dirs}/#@{int}, owner @{user_cache_dirs}/plasma-svgelements.lock rwk, owner @{user_share_dirs}/kscreen/* r,