diff --git a/apparmor.d/groups/lxqt/lxqt-config-file-associations b/apparmor.d/groups/lxqt/lxqt-config-file-associations new file mode 100644 index 000000000..32bfe664b --- /dev/null +++ b/apparmor.d/groups/lxqt/lxqt-config-file-associations @@ -0,0 +1,34 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +#include + +@{exec_path} = @{bin}/lxqt-config-file-associations +profile lxqt-config-file-associations @{exec_path} { + include + include + include + include + include + include + include + include + + @{exec_path} mr, + + owner @{user_config_dirs}/lxqt/** rwkl -> @{user_config_dirs}/lxqt/#@{int}, + owner @{user_config_dirs}/mimeapps* rwk, + owner @{user_config_dirs}/lxqt-* rwk, + + owner /tmp/#@{int} rwk, + + @{sys}/devices/@{pci_bus}/{,**} r, + @{sys}/devices/@{pci_bus}/**/**/** r, + @{sys}/devices/@{pci_bus}/**/**/**/** r, + + @{PROC}/sys/kernel/random/boot_id r, + + /dev/tty rw, +}