diff --git a/apparmor.d/groups/lxqt/lxqt-admin-user b/apparmor.d/groups/lxqt/lxqt-admin-user index ed9e52908..8e941b669 100644 --- a/apparmor.d/groups/lxqt/lxqt-admin-user +++ b/apparmor.d/groups/lxqt/lxqt-admin-user @@ -3,10 +3,12 @@ # Copyright (C) 2024 Besanon # SPDX-License-Identifier: GPL-2.0-only -#include +abi , + +include @{exec_path} = @{bin}/lxqt-admin-user -profile lxqt-admin-user @{exec_path} { +profile lxqt-admin-user @{exec_path} flags=(complain) { include include include @@ -15,18 +17,13 @@ profile lxqt-admin-user @{exec_path} { include include include + include @{exec_path} mr, - /etc/passwd r, - /etc/group r, - /etc/shells r, - /etc/nsswitch.conf r, - owner /tmp/{,**} r, - @{sys}/devices/@{pci_bus}/{,**} r, - @{sys}/devices/@{pci_bus}/**/**/** r, - /dev/tty rw, + + include if exists }