From d3aa4ae4a12c6a1be645282aacf829be39f8e564 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Mon, 16 Jun 2025 22:01:08 +0200
Subject: [PATCH] fix(abs): ensure generic app can run widevine.

fix #764
---
 apparmor.d/abstractions/common/app | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/apparmor.d/abstractions/common/app b/apparmor.d/abstractions/common/app
index 99da31590..efb3c838b 100644
--- a/apparmor.d/abstractions/common/app
+++ b/apparmor.d/abstractions/common/app
@@ -54,7 +54,7 @@
   @{MOUNTS}/** rwl,
   owner @{HOME}/ r,
   owner @{HOME}/.var/app/** rmix,
-  owner @{HOME}/** rwlk -> @{HOME}/**,
+  owner @{HOME}/** rwmlk -> @{HOME}/**,
   owner @{run}/user/@{uid}/ r,
   owner @{run}/user/@{uid}/** rwlk -> @{run}/user/@{uid}/**,
   owner @{user_games_dirs}/** rmix,
@@ -122,6 +122,7 @@
   owner @{PROC}/@{pid}/fd/@{int} rw,
   owner @{PROC}/@{pid}/fdinfo/@{int} r,
   owner @{PROC}/@{pid}/io r,
+  owner @{PROC}/@{pid}/limits r,
   owner @{PROC}/@{pid}/loginuid r,
   owner @{PROC}/@{pid}/mem r,
   owner @{PROC}/@{pid}/mounts r,