From fbb71fb47b39095365ebba057342a4b0330ac477 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Fri, 28 Mar 2025 18:16:42 +0100
Subject: [PATCH] fix(profile): thunar

fix #704
---
 apparmor.d/groups/xfce/thunar | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/apparmor.d/groups/xfce/thunar b/apparmor.d/groups/xfce/thunar
index b369d1204..bab16bca7 100644
--- a/apparmor.d/groups/xfce/thunar
+++ b/apparmor.d/groups/xfce/thunar
@@ -7,7 +7,7 @@ abi <abi/4.0>,
 include <tunables/global>
 
 @{exec_path} = @{bin}/thunar
-profile thunar @{exec_path} {
+profile thunar @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/bus-accessibility>
   include <abstractions/bus-session>
@@ -52,6 +52,9 @@ profile thunar @{exec_path} {
 
   @{run}/mount/utab r,
 
+  @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/cpu.max r,
+  @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/session-@{int}.scope/cpu.max r,
+
   owner @{PROC}/@{pid}/mountinfo r,
 
   # Silence non user's data