From dd129c1a035bcad1c54fcda31de87032dedae31c Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 23 Mar 2025 17:42:19 +0100
Subject: [PATCH] feat(profile): minor kde improvments.

---
 apparmor.d/groups/kde/kauth-chargethresholdhelper | 1 -
 apparmor.d/groups/kde/kscreenlocker_greet         | 4 +---
 apparmor.d/groups/kde/ksmserver                   | 2 --
 3 files changed, 1 insertion(+), 6 deletions(-)

diff --git a/apparmor.d/groups/kde/kauth-chargethresholdhelper b/apparmor.d/groups/kde/kauth-chargethresholdhelper
index 44a6d0239..8ed8bf82e 100644
--- a/apparmor.d/groups/kde/kauth-chargethresholdhelper
+++ b/apparmor.d/groups/kde/kauth-chargethresholdhelper
@@ -16,7 +16,6 @@ profile kauth-chargethresholdhelper @{exec_path} {
   /usr/share/icu/@{int}.@{int}/*.dat r,
 
   @{sys}/class/power_supply/ r,
-  @{sys}/devices/@{pci}/power_supply/** r,
   @{sys}/devices/**/power_supply/** r,
 
   include if exists <local/kauth-chargethresholdhelper>
diff --git a/apparmor.d/groups/kde/kscreenlocker_greet b/apparmor.d/groups/kde/kscreenlocker_greet
index c006f354c..2c129b426 100644
--- a/apparmor.d/groups/kde/kscreenlocker_greet
+++ b/apparmor.d/groups/kde/kscreenlocker_greet
@@ -29,8 +29,6 @@ profile kscreenlocker_greet @{exec_path} {
   signal (receive) set=(usr1, term) peer=ksmserver,
   signal (send) peer=kcheckpass,
 
-  unix (send,receive) type=stream peer=(label="ksmserver",addr=none),
-
   dbus send bus=system path=/org/freedesktop/DisplayManager/Seat@{int}
        interface=org.freedesktop.DBus.Introspectable
        member=Introspect
@@ -53,7 +51,7 @@ profile kscreenlocker_greet @{exec_path} {
 
   @{etc_ro}/environment r,
   @{etc_ro}/login.defs r,
-  @{etc_ro}/login.defs.d/ r,
+  @{etc_ro}/login.defs.d/{,*} r,
   @{etc_ro}/security/*.conf r,
   /etc/fstab r,
   /etc/machine-id r,
diff --git a/apparmor.d/groups/kde/ksmserver b/apparmor.d/groups/kde/ksmserver
index 61cd67246..eb53bc078 100644
--- a/apparmor.d/groups/kde/ksmserver
+++ b/apparmor.d/groups/kde/ksmserver
@@ -20,8 +20,6 @@ profile ksmserver @{exec_path} flags=(attach_disconnected,mediate_deleted) {
 
   ptrace (read) peer=kbuildsycoca5,
 
-  unix (send, receive) type=stream peer=(label="kscreenlocker_greet",addr=none),
-
   @{exec_path} mr,
 
   @{bin}/rm            rix,