diff --git a/apparmor.d/groups/lxqt/lxqt-admin-time b/apparmor.d/groups/lxqt/lxqt-admin-time new file mode 100644 index 000000000..eb2f0682c --- /dev/null +++ b/apparmor.d/groups/lxqt/lxqt-admin-time @@ -0,0 +1,32 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/lxqt-admin-time +profile lxqt-admin-time @{exec_path} flags=(complain) { + include + include + include + include + include + include + include + include + + @{exec_path} mr, + + owner @{user_config_dirs}/lxqt/** rwkl -> @{user_config_dirs}/lxqt/#@{int}, + + owner /tmp/@{int} r, + + @{PROC}/sys/kernel/random/boot_id r, + + /dev/tty rw, + + include if exists +}