Create lxqt-config-session

apparmor.d/groups/lxqt/lxqt-config-session

@@ -0,0 +1,53 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2024 Besanon  <m231009ts@mailfence.com>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/lxqt-config-session
+profile lxqt-config-session @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/gtk>
+  include <abstractions/graphics>
+  include <abstractions/video>
+  include <abstractions/lxqt>
+  include <abstractions/fontconfig-cache-read> 
+  include <abstractions/qt5>
+  include <abstractions/qt5-shader-cache>
+  include <abstractions/bus-accessibility>
+  include <abstractions/bus-session>
+  include <abstractions/gvfs-open>
+  include <abstractions/thumbnails-cache-read>
+  include <abstractions/thumbnails-cache-write>
+
+  @{exec_path}					mr,
+  
+  /usr/share/libfm-qt6/translations/libfm-qt_de.qm 	r,
+  /usr/share/gvfs/remote-volume-monitors/ 		r,
+  /usr/share/gvfs/remote-volume-monitors/udisks2.monitor r,
+
+  /etc/fstab 						r,
+  /etc/xdg/autostart/ 					r,
+  /etc/xdg/autostart/** 				r,
+  
+  owner @{user_config_dirs}/#@{int}    			rw,
+  owner @{user_config_dirs}/QtProject.conf.@{rand6}	rwkl, 
+  owner @{user_config_dirs}/QtProject.conf.lock 	rwk,
+  owner @{user_config_dirs}/autostart/ 			r,
+  owner @{user_config_dirs}/autostart/lxqt-config-monitor-autostart.desktop  r,
+  owner @{user_config_dirs}/lxqt/lxqt**  rwkl -> @{user_config_dirs}/lxqt/#@{int},
+  owner @{user_config_dirs}/lxqt/session.conf.lock 	rwk,
+
+  owner /tmp/@{int}  			 r,
+
+  owner @{PROC}/@{pid}/mountinfo 	r,
+
+  /dev/tty				rw,
+
+ include if exists <local/lxqt-config-session>
+}
+
+# vim:syntax=apparmor