From e27b2e145351cdc1d36bff0108070ade2ca787b6 Mon Sep 17 00:00:00 2001 From: curiosityseeker <60518106+curiosityseeker@users.noreply.github.com> Date: Sat, 26 Aug 2023 12:37:20 +0200 Subject: [PATCH] Update sddm --- apparmor.d/groups/kde/sddm | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/apparmor.d/groups/kde/sddm b/apparmor.d/groups/kde/sddm index b9d5f3836..90d2a18bd 100644 --- a/apparmor.d/groups/kde/sddm +++ b/apparmor.d/groups/kde/sddm @@ -40,6 +40,8 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) { ptrace (read) peer=kwalletd5, signal (send) set=(kill, term) peer=startplasma, + signal (send) set=term peer=startplasma-wayland, + signal (send) set=term peer=sddm-greeter, signal (send) set=(kill, term) peer=xorg, @{exec_path} mr, @@ -48,6 +50,8 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) { @{lib}/plasma-dbus-run-session-if-needed rix, @{lib}/sddm/sddm-helper rix, @{lib}/sddm/sddm-helper-start-wayland rix, + @{lib}/sddm/sddm-helper-start-x11user rix, + @{bin}/{,ba,da}sh rix, @{bin}/cat rix, @@ -91,6 +95,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) { /usr/share/sddm/faces/.*.icon r, /usr/share/sddm/themes/** r, /usr/share/wayland-sessions/{,*.desktop} r, + /usr/share/X11/xkb/** r, /usr/share/xsessions/{,*.desktop} r, /var/lib/AccountsService/icons/*.icon r, @@ -121,6 +126,12 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) { owner @{HOME}/.local/ w, owner @{HOME}/.Xauthority rw, + owner @{user_cache_dirs}/mesa_shader_cache/** r, + + owner @{user_config_dirs}/kdeglobals r, + owner @{user_config_dirs}/kdedefaults/kdeglobals r, + owner @{user_config_dirs}/startkderc r, + owner @{user_share_dirs}/ w, owner @{user_share_dirs}/kwalletd/ rw, owner @{user_share_dirs}/kwalletd/kdewallet.salt rw, @@ -158,6 +169,9 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) { owner @{PROC}/@{pid}/uid_map r, owner @{PROC}/1/limits r, + owner /tmp/server-@{int}.xkm rw, + owner /tmp/.X11-unix/X@{int} w, + /dev/tty@{int} rw, /dev/tty rw,