From f0da1f530f4c3a881a097b23fe1dc58d22b4e78e Mon Sep 17 00:00:00 2001
From: curiosityseeker <60518106+curiosityseeker@users.noreply.github.com>
Date: Thu, 10 Oct 2024 14:19:28 +0200
Subject: [PATCH] Update gmenudbusmenuproxy

profile gmenudbusmenuproxy {
  /usr/share/drirc.d/ r,
  /usr/share/drirc.d/00-mesa-defaults.conf r,
  /usr/share/drirc.d/00-radv-defaults.conf r,

  owner @{user_cache_dirs}/mesa_shader_cache_db/index rw,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part0/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part0/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part1/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part1/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part10/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part10/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part11/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part11/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part12/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part12/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part13/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part13/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part14/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part14/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part15/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part15/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part16/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part16/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part17/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part17/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part18/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part18/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part19/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part19/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part2/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part2/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part20/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part20/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part21/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part21/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part22/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part22/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part23/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part23/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part24/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part24/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part25/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part25/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part26/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part26/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part27/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part27/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part28/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part28/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part29/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part29/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part3/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part3/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part30/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part30/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part31/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part31/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part32/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part32/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part33/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part33/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part34/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part34/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part35/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part35/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part36/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part36/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part37/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part37/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part38/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part38/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part39/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part39/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part4/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part4/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part40/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part40/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part41/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part41/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part42/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part42/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part43/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part43/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part44/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part44/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part45/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part45/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part46/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part46/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part47/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part47/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part48/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part48/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part49/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part49/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part5/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part5/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part6/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part6/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part7/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part7/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part8/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part8/mesa_cache.idx k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part9/mesa_cache.db k,
  owner @{user_cache_dirs}/mesa_shader_cache_db/part9/mesa_cache.idx k,

  @{sys}/devices/@{pci}/device r,
  @{sys}/devices/@{pci}/revision r,
  @{sys}/devices/@{pci}/subsystem_device r,
  @{sys}/devices/@{pci}/subsystem_vendor r,
  @{sys}/devices/@{pci}/uevent r,
  @{sys}/devices/@{pci}/vendor r,

  @{PROC}/sys/dev/i915/perf_stream_paranoid r,

  /dev/dri/ r,
  /dev/dri/renderD128 rw,
}
---
 apparmor.d/groups/kde/gmenudbusmenuproxy | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apparmor.d/groups/kde/gmenudbusmenuproxy b/apparmor.d/groups/kde/gmenudbusmenuproxy
index 1d85b3a6b..c3850d103 100644
--- a/apparmor.d/groups/kde/gmenudbusmenuproxy
+++ b/apparmor.d/groups/kde/gmenudbusmenuproxy
@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{bin}/gmenudbusmenuproxy
 profile gmenudbusmenuproxy @{exec_path} {
   include <abstractions/base>
+  include <abstractions/graphics>
   include <abstractions/gtk>
   include <abstractions/kde-strict>
   include <abstractions/nameservice-strict>
@@ -25,6 +26,10 @@ profile gmenudbusmenuproxy @{exec_path} {
   owner @{user_config_dirs}/gtk-{2,3}.0/settings.ini{,.@{rand6}} rwl,
   owner @{user_config_dirs}/gtk-{2,3}.0/settings.ini.lock rwk,
 
+  owner @{run}/user/@{uid}/iceauth_@{rand6} r,
+
+  /dev/tty r,
+
   include if exists <local/gmenudbusmenuproxy>
 }