From f6dca084c08064e62769e954e98f17febd21d9e9 Mon Sep 17 00:00:00 2001
From: Besanon <m231009ts@mailfence.com>
Date: Tue, 12 Aug 2025 13:59:57 +0200
Subject: [PATCH] Create lxqt-config-monitor

---
 apparmor.d/groups/lxqt/lxqt-config-monitor | 42 ++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 apparmor.d/groups/lxqt/lxqt-config-monitor

diff --git a/apparmor.d/groups/lxqt/lxqt-config-monitor b/apparmor.d/groups/lxqt/lxqt-config-monitor
new file mode 100644
index 000000000..8545b3c8c
--- /dev/null
+++ b/apparmor.d/groups/lxqt/lxqt-config-monitor
@@ -0,0 +1,42 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# Copyright (C) 2024 Besanon  <m231009ts@mailfence.com>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/lxqt-config-monitor
+profile lxqt-config-monitor @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/bus-session>
+  include <abstractions/bus-accessibility>
+  include <abstractions/lxqt>
+  include <abstractions/graphics>
+
+  signal (read) set=(kill,term) peer=lxqt-session,
+
+  @{exec_path}			          	mr,
+
+  /var/cache/fontconfig/{,**} 	rw,
+
+  owner @{user_config_dirs}/autostart/lxqt-config-monitor-autostart.desktop     rw,
+  owner @{user_config_dirs}/lxqt/ 									r,
+  owner @{user_config_dirs}/lxqt/#@{int}                          	rwk,
+  owner @{user_config_dirs}/lxqt/lxqt.conf.lock                   	rwk,
+  owner @{user_config_dirs}/lxqt/lxqt.conf.@{rand6}					rw,
+  owner @{user_config_dirs}/lxqt/lxqt.conf.@{rand6}  l -> @{user_config_dirs}/lxqt/#*,
+  owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf.lock 		rwk,
+  owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf.@{rand6} 	rw,
+  owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf.@{rand6} l -> @{user_config_dirs}/lxqt/#@{int},
+  owner @{user_config_dirs}/lxqt/lxqt-config-monitor.conf l -> @{user_config_dirs}/lxqt/#@{int},
+
+  owner /tmp/@{int}  		r,
+
+  /dev/tty					rw,
+
+  include if exists <local/lxqt-config-monitor>
+}
+
+# vim:syntax=apparmor