diff --git a/apparmor.d/profiles-a-f/cheese b/apparmor.d/profiles-a-f/cheese index a55aeb802..cadd1beab 100644 --- a/apparmor.d/profiles-a-f/cheese +++ b/apparmor.d/profiles-a-f/cheese @@ -8,14 +8,12 @@ include @{exec_path} = @{bin}/cheese profile cheese @{exec_path} { - include include + include include - include - include + include include include - include include include @@ -24,12 +22,9 @@ profile cheese @{exec_path} { @{exec_path} mr, @{bin}/bwrap Px -> gnome-desktop-thumbnailers, - @{open_path} rPx -> child-open, + @{open_path} rPx -> child-open-help, - @{system_share_dirs}/X11/xkb/{,**} r, - @{system_share_dirs}/applications/{,*.desktop} r, @{system_share_dirs}/gnome-video-effects/{,*.effect} r, - @{system_share_dirs}/icons/{,**} r, @{system_share_dirs}/ladspa/rdf/{,**} r, @{system_share_dirs}/thumbnailers/{,*.thumbnailer} r, @@ -41,8 +36,7 @@ profile cheese @{exec_path} { owner @{user_cache_dirs}/gnome-desktop-thumbnailer/gstreamer-1.0/ r, - owner /dev/shm/wlroots-* r, - @{run}/udev/data/c236:0 r, + @{run}/udev/data/c@{dynamic}:@{int} r, owner @{tmp}/flatpak-seccomp-@{rand6} rw, owner @{tmp}/gnome-desktop-thumbnailer-@{rand6}/{,**} rw,