diff --git a/apparmor.d/groups/systemd/systemd-backlight b/apparmor.d/groups/systemd/systemd-backlight index c7784a56..d50a26cd 100644 --- a/apparmor.d/groups/systemd/systemd-backlight +++ b/apparmor.d/groups/systemd/systemd-backlight @@ -1,5 +1,6 @@ # apparmor.d - Full set of apparmor profiles # Copyright (C) 2018-2021 Mikhail Morfikov +# Copyright (C) 2022 Alexandre Pujol # SPDX-License-Identifier: GPL-2.0-only abi , @@ -7,7 +8,7 @@ abi , include @{exec_path} = /{usr/,}lib/systemd/systemd-backlight -profile systemd-backlight @{exec_path} flags=(complain) { +profile systemd-backlight @{exec_path} { include include @@ -16,27 +17,28 @@ profile systemd-backlight @{exec_path} flags=(complain) { @{exec_path} mr, + /var/lib/systemd/backlight/*backlight* rw, + + @{run}/udev/data/+pci:* r, + @{run}/udev/data/+backlight:* r, + @{run}/udev/data/+leds:*backlight* r, + @{sys}/bus/ r, @{sys}/class/ r, @{sys}/class/backlight/ r, - @{sys}/devices/pci[0-9]*/**/class r, - @{sys}/devices/pci[0-9]*/**/backlight/**/brightness rw, @{sys}/devices/pci[0-9]*/**/backlight/**/{max_brightness,actual_brightness} r, @{sys}/devices/pci[0-9]*/**/backlight/**/{uevent,type} r, - @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/brightness rw, + @{sys}/devices/pci[0-9]*/**/backlight/**/brightness rw, + @{sys}/devices/pci[0-9]*/**/class r, @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/{max_brightness,actual_brightness} r, @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/{uevent,type} r, + @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/brightness rw, + @{sys}/devices/pci[0-9]*/*/uevent r, - @{sys}/devices/platform/**/leds/*backlight*/uevent r, - @{sys}/devices/platform/**/leds/*backlight*/max_brightness r, @{sys}/devices/platform/**/leds/*backlight*/brightness rw, - - - @{run}/udev/data/+backlight:* r, - @{run}/udev/data/+leds:*backlight* r, - - /var/lib/systemd/backlight/*backlight* rw, + @{sys}/devices/platform/**/leds/*backlight*/max_brightness r, + @{sys}/devices/platform/**/leds/*backlight*/uevent r, include if exists } diff --git a/apparmor.d/groups/systemd/systemd-logind b/apparmor.d/groups/systemd/systemd-logind index 6b733d3e..a7c45b08 100644 --- a/apparmor.d/groups/systemd/systemd-logind +++ b/apparmor.d/groups/systemd/systemd-logind @@ -10,6 +10,7 @@ include @{exec_path} = /{usr/,}lib/systemd/systemd-logind profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) { include + include include include include diff --git a/apparmor.d/profiles-a-f/flatpak-system-helper b/apparmor.d/profiles-a-f/flatpak-system-helper index 5f1d899d..2f1d85f2 100644 --- a/apparmor.d/profiles-a-f/flatpak-system-helper +++ b/apparmor.d/profiles-a-f/flatpak-system-helper @@ -10,6 +10,7 @@ include profile flatpak-system-helper @{exec_path} { include include + include include include