From 84f22ad331e86ae42d859dd3c0f203e4c1f2a397 Mon Sep 17 00:00:00 2001
From: doublez13 <zakraise@eng.utah.edu>
Date: Fri, 2 Feb 2024 18:53:34 -0700
Subject: [PATCH] Use abstractions for Downloads and Uploads

This might be a little annoying because by default mutt saves attachments in the directory that it was started from (most likely ~/), and there is no config option that I'm aware of to set a default download location.

A user will either need to manually specify a location (like ~/Downloads) when saving, or allow saving to ~/ in the local override.
---
 apparmor.d/profiles-m-r/mutt | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/apparmor.d/profiles-m-r/mutt b/apparmor.d/profiles-m-r/mutt
index 564119da5..3f5f34ec3 100644
--- a/apparmor.d/profiles-m-r/mutt
+++ b/apparmor.d/profiles-m-r/mutt
@@ -13,6 +13,8 @@ profile mutt @{exec_path} {
   include <abstractions/openssl>
   include <abstractions/ssl_certs>
   include <abstractions/consoles>
+  include <abstractions/user-download-strict>
+  include <abstractions/user-read>
 
   network inet dgram,
   network inet6 dgram,
@@ -30,15 +32,8 @@ profile mutt @{exec_path} {
 
   owner @{HOME}/.cache/mutt rwk,
 
-  # Used when saving attachments. Mutt saves attachments in whatever directory
-  # it's launched from, which is most likely @{HOME}.
-  owner @{HOME}/*           lw,
-  owner @{HOME}/.mutt*/{,*} w,
-  owner @{HOME}/Downloads/* lw,
   # Used When viewing attachments
   owner /tmp/*              lrw,
-  # Allow uploading attachments from Public
-  owner @{HOME}/Public/*    r,
 
   #Needed to open a mailbox (at least an imap one)
   owner /tmp/.mutt*/  rw,