diff --git a/apparmor.d/groups/lxqt/obconf-qt b/apparmor.d/groups/lxqt/obconf-qt new file mode 100644 index 000000000..0289ba691 --- /dev/null +++ b/apparmor.d/groups/lxqt/obconf-qt @@ -0,0 +1,50 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +#include + +@{exec_path} = @{bin}/obconf-qt +profile obconf-qt @{exec_path} { + include + include + include + include + include + include + include + include + include + include + + @{exec_path} mr, + + /usr/share/obconf/{,*} r, + /usr/share/ibus/setup/{,**} rw, + /usr/share/drirc.d/ r, + /usr/share/drirc.d/00-mesa-defaults.conf r, + /usr/share/drirc.d/00-radv-defaults.conf r, + /usr/share/obconf-qt/translations/obconf-qt_de.qm r, + + /etc/xdg/openbox/rc.xml r, + /etc/fstab r, + + owner @{HOME}/.themes/{,**} r, + + owner @{user_config_dirs}/openbox/rc.xml rw, + owner @{user_config_dirs}/openbox/{,**} rw, + + owner /tmp/{,**} r, + + @{sys}/devices/@{pci_bus}/**/**/** r, + @{sys}/devices/@{pci_bus}/{,**} r, + @{sys}/devices/@{pci_bus}/**/**/** r, + + owner @{PROC}/@{pid}/mountinfo r, + owner @{PROC}/@{pid}/mounts r, + + /dev/dri/card@{int} rw, + owner /dev/tty@{int} rw, + +}