diff --git a/apparmor.d/groups/lxqt/lxqt-powermanagement b/apparmor.d/groups/lxqt/lxqt-powermanagement new file mode 100644 index 000000000..b789145ae --- /dev/null +++ b/apparmor.d/groups/lxqt/lxqt-powermanagement @@ -0,0 +1,48 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# Copyright (C) 2024 Besanon +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/lxqt-powermanagement +profile lxqt-powermanagement @{exec_path} flags=(attach_disconnected) { + include + include + include + include + include + include + include + + network netlink raw, + + @{exec_path} mr, + + @{bin}/xset rPx, + @{bin}/pkexec rPx, + @{bin}/{,ba,da}sh rix, + + /etc/udev/udev.conf r, + /etc/fstab r, + + owner /tmp/@{int} r, + + @{run}/systemd/inhibit/* rw, + + @{sys}/class/backlight/ r, + @{sys}/devices/@{pci_bus}/0000:00:08.1/0000:05:00.0/drm/card0/card0-eDP-1/amdgpu_bl0/type r, + @{sys}/devices/@{pci_bus}/0000:00:08.1/0000:05:00.0/drm/card0/card0-eDP-1/amdgpu_bl0/max_brightness r, + @{sys}/devices/@{pci_bus}/0000:00:08.1/0000:05:00.0/drm/card0/card0-eDP-1/amdgpu_bl0/bl_power r, + @{sys}/devices/@{pci_bus}/0000:00:08.1/0000:05:00.0/drm/card0/card0-eDP-1/amdgpu_bl0/actual_brightness r, + + owner @{PROC}/@{pid}/mounts r, + + /dev/tty rw, + + include if exists +} + +# vim:syntax=apparmor