diff --git a/apparmor.d/profiles-a-l/gtk-query-immodules b/apparmor.d/profiles-a-l/gtk-query-immodules new file mode 100644 index 000000000..2d6124384 --- /dev/null +++ b/apparmor.d/profiles-a-l/gtk-query-immodules @@ -0,0 +1,22 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/gtk-query-immodules-{2,3}.0 +profile gtk-query-immodules @{exec_path} { + include + + @{exec_path} mr, + + /{usr/,}lib/gtk-{3,4}.0/**/immodules.cache.[0-9A-Z]* w, + + # Silencer + deny network inet6 stream, + deny network inet stream, + + include if exists +} \ No newline at end of file