From 006ed3f681783dda476ede44101ed4bf39db96ba Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Wed, 21 Aug 2024 10:10:28 +0100 Subject: [PATCH] fix(profile): fscrypt works on a specific homedir. fix #430 --- apparmor.d/groups/gnome/gdm-session-worker | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/apparmor.d/groups/gnome/gdm-session-worker b/apparmor.d/groups/gnome/gdm-session-worker index 92744652..f50e3031 100644 --- a/apparmor.d/groups/gnome/gdm-session-worker +++ b/apparmor.d/groups/gnome/gdm-session-worker @@ -99,9 +99,11 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) { owner /.fscrypt/protectors/@{hex16} r, /home/ r, + /home/.fscrypt/policies/ r, + owner /home/.fscrypt/policies/@{hex32} r, + owner /home/.fscrypt/protectors/@{hex16}.link r, + owner @{HOME}/.pam_environment r, - owner @{HOME}/policies/@{hex32} r, - owner @{HOME}/protectors/@{hex16}.link r, @{run}/cockpit/inactive.motd r, owner @{run}/systemd/seats/seat@{int} r,