From e9c652f387a92d6c67f0c5b1853d8d42fa5b10cc Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 13 Apr 2025 20:38:14 +0200
Subject: [PATCH] feat(profile): minor update.

---
 .../gnome/gnome-calculator-search-provider    |  2 ++
 apparmor.d/groups/pacman/pacman               |  5 -----
 apparmor.d/profiles-g-l/ghc-pkg               |  4 +++-
 apparmor.d/profiles-g-l/gimp                  |  3 +++
 apparmor.d/profiles-g-l/gpartedbin            |  2 +-
 apparmor.d/profiles-m-r/nvtop                 | 19 ++++++++++---------
 6 files changed, 19 insertions(+), 16 deletions(-)

diff --git a/apparmor.d/groups/gnome/gnome-calculator-search-provider b/apparmor.d/groups/gnome/gnome-calculator-search-provider
index da03ed665..8400f03c1 100644
--- a/apparmor.d/groups/gnome/gnome-calculator-search-provider
+++ b/apparmor.d/groups/gnome/gnome-calculator-search-provider
@@ -23,6 +23,8 @@ profile gnome-calculator-search-provider @{exec_path} {
 
   @{bin}/* rPUx,
 
+  owner @{user_cache_dirs}/gnome-calculator/* r,
+
   owner @{PROC}/@{pid}/fd/ r,
   owner @{PROC}/@{pid}/cmdline r,
 
diff --git a/apparmor.d/groups/pacman/pacman b/apparmor.d/groups/pacman/pacman
index 0043cd061..271540f52 100644
--- a/apparmor.d/groups/pacman/pacman
+++ b/apparmor.d/groups/pacman/pacman
@@ -149,11 +149,6 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
         /dev/tty@{int} rw,
   owner /dev/pts/@{int} rw,
 
-  # Silencer,
-  deny @{HOME}/ r,
-  deny @{HOME}/**/ r,
-  deny /tmp/ r,
-
   profile gpg {
     include <abstractions/base>
     include <abstractions/nameservice-strict>
diff --git a/apparmor.d/profiles-g-l/ghc-pkg b/apparmor.d/profiles-g-l/ghc-pkg
index df6613042..3ccfdec4a 100644
--- a/apparmor.d/profiles-g-l/ghc-pkg
+++ b/apparmor.d/profiles-g-l/ghc-pkg
@@ -6,7 +6,7 @@ abi <abi/4.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{bin}/ghc-pkg{,-*}
+@{exec_path} = @{bin}/ghc-pkg{,-*} @{lib}/ghc-@{version}/bin/ghc-pkg-@{version}
 profile ghc-pkg @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
@@ -26,6 +26,8 @@ profile ghc-pkg @{exec_path} {
 
   @{sys}/devices/system/node/ r,
 
+  @{PROC}/@{pid}/task/@{tid}/comm rw,
+
   include if exists <local/ghc-pkg>
 }
 
diff --git a/apparmor.d/profiles-g-l/gimp b/apparmor.d/profiles-g-l/gimp
index 7f8eb716a..b335650d8 100644
--- a/apparmor.d/profiles-g-l/gimp
+++ b/apparmor.d/profiles-g-l/gimp
@@ -46,6 +46,9 @@ profile gimp @{exec_path} {
   /etc/fstab r,
   /etc/gimp/{,**} r,
 
+  owner @{HOME}/@{XDG_SCREENSHOTS_DIR}/{,**} rw,
+  owner @{HOME}/@{XDG_WALLPAPERS_DIR}/{,**} rw,
+
   owner @{user_documents_dirs}/{,**} rw,
   owner @{user_pictures_dirs}/{,**} rw,
   owner @{user_work_dirs}/{,**} rw,
diff --git a/apparmor.d/profiles-g-l/gpartedbin b/apparmor.d/profiles-g-l/gpartedbin
index a82bf8b47..0b2fea4c3 100644
--- a/apparmor.d/profiles-g-l/gpartedbin
+++ b/apparmor.d/profiles-g-l/gpartedbin
@@ -8,7 +8,7 @@ abi <abi/4.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/gpartedbin @{lib}/{,gparted/}gpartedbin
-profile gpartedbin @{exec_path} {
+profile gpartedbin @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/dconf-write>
   include <abstractions/desktop>
diff --git a/apparmor.d/profiles-m-r/nvtop b/apparmor.d/profiles-m-r/nvtop
index e4846d58e..d0553d186 100644
--- a/apparmor.d/profiles-m-r/nvtop
+++ b/apparmor.d/profiles-m-r/nvtop
@@ -43,15 +43,16 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
   @{sys}/devices/@{pci}/pcie_bw r,
   @{sys}/devices/system/node/node@{int}/cpumap r,
 
-  @{PROC}/ r,
-  @{PROC}/@{pids}/ r,
-  @{PROC}/@{pids}/cmdline r,
-  @{PROC}/@{pids}/fd/ r,
-  @{PROC}/@{pids}/fdinfo/ r,
-  @{PROC}/@{pids}/fdinfo/@{int} r,
-  @{PROC}/@{pids}/stat r,
-  @{PROC}/devices r,
-  @{PROC}/driver/nvidia/capabilities/mig/{config,monitor}  r,
+        @{PROC}/ r,
+        @{PROC}/@{pid}/ r,
+        @{PROC}/@{pid}/cmdline r,
+        @{PROC}/@{pid}/fd/ r,
+        @{PROC}/@{pid}/fdinfo/ r,
+        @{PROC}/@{pid}/fdinfo/@{int} r,
+        @{PROC}/@{pid}/stat r,
+        @{PROC}/devices r,
+        @{PROC}/driver/nvidia/capabilities/mig/{config,monitor}  r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
 
   /dev/dri/ r,
   /dev/nvidia-caps/ rw,