diff --git a/apparmor.d/groups/freedesktop/polkit-mate-authentication-agent b/apparmor.d/groups/freedesktop/polkit-mate-authentication-agent index 38ee6a3b..687664b4 100644 --- a/apparmor.d/groups/freedesktop/polkit-mate-authentication-agent +++ b/apparmor.d/groups/freedesktop/polkit-mate-authentication-agent @@ -1,5 +1,6 @@ # apparmor.d - Full set of apparmor profiles -# Copyright (C) 2020-2021 Mikhail Morfikov +# Copyright (C) 2020-2022 Mikhail Morfikov +# Copyright (C) 2022 Alexandre Pujol # SPDX-License-Identifier: GPL-2.0-only abi , @@ -9,14 +10,15 @@ include @{exec_path} = /{usr/,}lib/@{multiarch}/polkit-mate/polkit-mate-authentication-agent-[0-9] profile polkit-mate-authentication-agent @{exec_path} { include - include - include - include - include - include + include include include + include + include + include + include include + include signal (send) set=(term, kill) peer=polkit-agent-helper, @@ -24,25 +26,19 @@ profile polkit-mate-authentication-agent @{exec_path} { /{usr/,}lib/polkit-[0-9]/polkit-agent-helper-[0-9] rPx, - @{PROC}/1/cgroup r, - owner @{PROC}/@{pid}/cgroup r, - owner @{PROC}/@{pid}/fd/ r, + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/X11/xkb/** r, /var/lib/dbus/machine-id r, /etc/machine-id r, owner @{HOME}/.Xauthority r, - include - owner @{run}/user/@{uid}/dconf/ rw, - owner @{run}/user/@{uid}/dconf/user rw, - - /usr/share/glib-2.0/schemas/gschemas.compiled r, - - /usr/share/X11/xkb/** r, - - # file_inherit owner /dev/tty[0-9]* rw, + @{PROC}/1/cgroup r, + owner @{PROC}/@{pid}/cgroup r, + owner @{PROC}/@{pid}/fd/ r, + include if exists }