From 7f9664c51f0aec674bee24a6460323b78e08735e Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 17 Aug 2025 17:51:10 +0200
Subject: [PATCH] feat(profile): add profile for mpris-proxy.

---
 apparmor.d/profiles-m-r/mpris-proxy | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 apparmor.d/profiles-m-r/mpris-proxy

diff --git a/apparmor.d/profiles-m-r/mpris-proxy b/apparmor.d/profiles-m-r/mpris-proxy
new file mode 100644
index 000000000..2f31aea79
--- /dev/null
+++ b/apparmor.d/profiles-m-r/mpris-proxy
@@ -0,0 +1,28 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/mpris-proxy
+profile mpris-proxy @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/bus-session>
+  include <abstractions/bus-system>
+  include <abstractions/bus/org.bluez>
+  include <abstractions/bus/org.mpris.MediaPlayer2.Player>
+
+  #aa:dbus own bus=session name=org.mpris.MediaPlayer2
+  dbus receive bus=session path=/
+       interface=org.freedesktop.DBus.Introspectable
+       member=Introspect
+       peer=(name=@{busname}, label=gnome-shell),
+
+  @{exec_path} mr,
+
+  include if exists <local/mpris-proxy>
+}
+
+# vim:syntax=apparmor