From b75deb527eedc5a747b17fd64587110e44c1d930 Mon Sep 17 00:00:00 2001
From: fira959 <fira959@proton.me>
Date: Tue, 14 May 2024 21:50:31 +0200
Subject: [PATCH] Update signal-desktop-chrome-sandbox

---
 .../groups/apps/signal-desktop-chrome-sandbox     | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/apparmor.d/groups/apps/signal-desktop-chrome-sandbox b/apparmor.d/groups/apps/signal-desktop-chrome-sandbox
index ab21ac6c2..32cf0c3fc 100644
--- a/apparmor.d/groups/apps/signal-desktop-chrome-sandbox
+++ b/apparmor.d/groups/apps/signal-desktop-chrome-sandbox
@@ -7,17 +7,22 @@ abi <abi/3.0>,
 
 include <tunables/global>
 
-@{SIGNAL_INSTALLDIR} = "/opt/Signal{, Beta}"
-@{SIGNAL_HOMEDIR} = "@{user_config_dirs}/Signal{, Beta}"
+@{lib_dirs} = "/usr/lib/signal-desktop"
+@{lib_dirs} += "/opt/Signal{, Beta}"
+@{config_dirs} = "@{user_config_dirs}/Signal{, Beta}"
 
-#@{exec_path} = @{SIGNAL_INSTALLDIR}/chrome-sandbox  # (#FIXME#)
-@{exec_path} = "/opt/Signal{, Beta}/chrome-sandbox"
+@{exec_path} = @{lib_dirs}/chrome-sandbox
 profile signal-desktop-chrome-sandbox @{exec_path} {
   include <abstractions/base>
 
+  capability sys_admin,
+  capability sys_chroot,
+
   @{exec_path} mr,
 
-  @{SIGNAL_INSTALLDIR}/signal-desktop{,-beta} rPx,
+  @{lib_dirs}/signal-desktop{,-beta} rPx,
+
+  @{PROC}/@{pid}/ r,
 
   include if exists <local/signal-desktop-chrome-sandbox>
 }