From 0edde44e1dc4327a0db8ceb8dda8176b3e49027d Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Sat, 15 Apr 2023 11:58:34 +0100 Subject: [PATCH] feat(kde): improve integration with various launcher. --- apparmor.d/groups/kde/kwin_x11 | 4 ++++ apparmor.d/groups/kde/startplasma-x11 | 3 ++- apparmor.d/{profiles-s-z => groups/kde}/xdm-xsession | 2 ++ 3 files changed, 8 insertions(+), 1 deletion(-) rename apparmor.d/{profiles-s-z => groups/kde}/xdm-xsession (96%) diff --git a/apparmor.d/groups/kde/kwin_x11 b/apparmor.d/groups/kde/kwin_x11 index 007b36ad..f424a01e 100644 --- a/apparmor.d/groups/kde/kwin_x11 +++ b/apparmor.d/groups/kde/kwin_x11 @@ -15,6 +15,10 @@ profile kwin_x11 @{exec_path} { include include + network inet dgram, + network inet6 dgram, + network netlink raw, + @{exec_path} mr, /{usr/,}lib/kwin_killer_helper rix, diff --git a/apparmor.d/groups/kde/startplasma-x11 b/apparmor.d/groups/kde/startplasma-x11 index c8578bb3..03ebeeb3 100644 --- a/apparmor.d/groups/kde/startplasma-x11 +++ b/apparmor.d/groups/kde/startplasma-x11 @@ -20,12 +20,13 @@ profile startplasma-x11 @{exec_path} { /usr/share/color-schemes/{,**} r, /usr/share/desktop-directories/{,**} r, + /usr/share/icu/{,**} r, /usr/share/knotifications5/{,**} r, /usr/share/kservices5/{,**} r, /usr/share/kservicetypes5/{,**} r, /usr/share/mime/{,**} r, /usr/share/plasma/{,**} r, - /usr/share/qt/translations/*.qm r, + /usr/share/qt*/translations/*.qm r, /etc/xdg/menus/{,*.menu} r, /etc/machine-id r, diff --git a/apparmor.d/profiles-s-z/xdm-xsession b/apparmor.d/groups/kde/xdm-xsession similarity index 96% rename from apparmor.d/profiles-s-z/xdm-xsession rename to apparmor.d/groups/kde/xdm-xsession index db1220fa..471e3b96 100644 --- a/apparmor.d/profiles-s-z/xdm-xsession +++ b/apparmor.d/groups/kde/xdm-xsession @@ -28,10 +28,12 @@ profile xdm-xsession @{exec_path} { /{usr/,}bin/ssh-agent rix, /{usr/,}bin/tty rix, /{usr/,}bin/uname rix, + /{usr/,}bin/tr rix, /{usr/,}bin/dbus-update-activation-environment rCx -> dbus, /{usr/,}bin/flatpak rPUx, /{usr/,}bin/pidof rPx, + /{usr/,}bin/startplasma-x11 rPx, /{usr/,}bin/systemctl rPx -> child-systemctl, /{usr/,}bin/xdg-user-dirs-update rPx, /{usr/,}bin/xrdb rPx,