apparmor.d/apparmor.d/groups/lxqt/lxqt-globalkeysd
2024-08-28 11:35:33 +02:00

46 lines
1.3 KiB
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2024 Besanon <m231009ts@mailfence.com>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/lxqt-globalkeysd
profile lxqt-globalkeysd @{exec_path} {
include <abstractions/base>
include <abstractions/gtk>
include <abstractions/video>
include <abstractions/lxqt>
include <abstractions/fontconfig-cache-read>
include <abstractions/fontconfig-cache-write>
include <abstractions/qt5-shader-cache>
include <abstractions/dbus-session>
include <abstractions/dbus-accessibility>
include <abstractions/gvfs-open>
include <abstractions/nameservice-strict>
@{exec_path} mr,
@{bin}/screengrab rpx,
@{bin}/lxqt-config-brightness rpx,
/usr/share/lxqt/globalkeyshortcuts.conf rw,
/var/lib/dbus/machine-id r,
owner @{user_config_dirs}/lxqt/ r,
owner @{user_config_dirs}/lxqt/globalkeyshortcuts.conf.lock wrk,
owner @{user_config_dirs}/lxqt/#@{int} wr,
owner @{user_config_dirs}/lxqt/globalkeyshortcuts.conf.@{rand6} rw,
owner @{user_config_dirs}/lxqt/globalkeyshortcuts.conf.@{rand6} l -> @{user_config_dirs}/lxqt/#@{int},
/dev/tty rw,
owner /tmp/@{int} r,
include if exists <local/lxqt-globalkeysd>
}
# vim:syntax=apparmor