diff --git a/apparmor.d/groups/lxqt/lxqt-config-input b/apparmor.d/groups/lxqt/lxqt-config-input index b2a407373..0736f18b4 100644 --- a/apparmor.d/groups/lxqt/lxqt-config-input +++ b/apparmor.d/groups/lxqt/lxqt-config-input @@ -3,10 +3,12 @@ # Copyright (C) 2024 Besanon # SPDX-License-Identifier: GPL-2.0-only -#include +abi , + +include @{exec_path} = @{bin}/lxqt-config-input -profile lxqt-config-input @{exec_path} { +profile lxqt-config-input @{exec_path} flags=(complain) { include include include @@ -24,10 +26,6 @@ profile lxqt-config-input @{exec_path} { owner /tmp/@{int} r, - owner @{run}/udev/data/ r, - owner @{run}/udev/data/** r, - owner @{run}/udev/data/**/** r, - @{run}/udev/data/ r, @{run}/udev/data/+acpi:* r, @{run}/udev/data/+bluetooth:* r, @@ -54,14 +52,12 @@ profile lxqt-config-input @{exec_path} { @{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511 @{sys}/devices/ r, - @{sys}/devices/{,**} r, @{sys}/class/ r, - @{sys}/class/{,**} r, @{sys}/bus/ r, - @{sys}/bus/{,**} r, @{PROC}/sys/kernel/random/boot_id r, /dev/tty rw, + include if exists }