Create lxqt-config-appearance

apparmor.d/groups/lxqt/lxqt-config-appearance

@@ -0,0 +1,51 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2024 Besanon  <m231009ts@mailfence.com>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/lxqt-config-appearance
+profile lxqt-config-appearance @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/bus-session>
+  include <abstractions/bus-accessibility>
+  include <abstractions/dconf-write>
+  include <abstractions/graphics>
+  include <abstractions/lxqt>
+  include <abstractions/nameservice-strict>
+
+  @{exec_path}				mr,
+
+  @{bin}/gsettings			rPx,  
+  @{bin}/pcmanfm-qt			rPx,
+  @{bin}/xsettingsd 		rPx,
+
+  owner @{HOME}/.gtkrc-2.0 	rw,
+  owner @{HOME}/.icons/default/index.theme rw,
+  owner @{HOME}/.Xdefaults 	rw,
+  owner @{HOME}/.Xresources rw,
+
+  owner @{user_config_dirs}/gtk-3.0/settings.ini rw,
+  owner @{user_config_dirs}/lxqt/  r,
+  owner @{user_config_dirs}/lxqt/#@{int}  			  rwk,
+  owner @{user_config_dirs}/lxqt/session.conf.lock rwk,
+  owner @{user_config_dirs}/lxqt/lxqt.conf.lock 		  rwk,
+  owner @{user_config_dirs}/lxqt/lxqt.conf.@{rand6}  rw,
+  owner @{user_config_dirs}/lxqt/lxqt.conf.@{rand6}  l -> @{user_config_dirs}/lxqt/#*,
+  owner @{user_config_dirs}/lxqt/lxqt-config-appearance.conf.lock rwk,
+  owner @{user_config_dirs}/lxqt/lxqt-config-appearance.conf.@{rand6} rw,
+  owner @{user_config_dirs}/lxqt/lxqt-config-appearance.conf.@{rand6} l -> @{user_config_dirs}/lxqt/#@{int},
+  owner @{user_config_dirs}/pcmanfm-qt/lxqt/settings.conf 	  r,
+
+  owner /tmp/#@{int} 			rw,
+  owner /tmp/lxqt-config-appearance.@{rand6} rwl -> /tmp/#@{int}, 
+
+  /dev/tty				rw,
+
+  include if exists <local/lxqt-config-appearance>
+}
+
+# vim:syntax=apparmor