From 120db25fc6a5dfe5f2c46242dbbf447c4cf48e46 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Fri, 5 Jul 2024 12:38:32 +0100
Subject: [PATCH]  fix: ensure xdg-dbus-proxy have access to download files.

 fix:  #400
---
 apparmor.d/groups/freedesktop/xdg-dbus-proxy | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/apparmor.d/groups/freedesktop/xdg-dbus-proxy b/apparmor.d/groups/freedesktop/xdg-dbus-proxy
index bfc15989..dea66efb 100644
--- a/apparmor.d/groups/freedesktop/xdg-dbus-proxy
+++ b/apparmor.d/groups/freedesktop/xdg-dbus-proxy
@@ -17,6 +17,7 @@ profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
   include <abstractions/bus/org.freedesktop.NetworkManager>
   include <abstractions/bus/org.freedesktop.portal.Desktop>
   include <abstractions/consoles>
+  include <abstractions/user-download-strict>
 
   network unix stream,
 
@@ -31,6 +32,7 @@ profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
   owner @{HOME}/.var/app/*/.local/share/*/**/usr/.ref rw,
 
   owner @{run}/firejail/dbus/@{int}/@{int}-{system,user} rw,
+  owner @{run}/flatpak/doc/** r,
   owner @{run}/user/@{uid}/.dbus-proxy/{system,session,a11y}-bus-proxy-@{rand6} rw,
   owner @{run}/user/@{uid}/webkitgtk/a11y-proxy-@{rand6} rw,
   owner @{run}/user/@{uid}/webkitgtk/bus-proxy-@{rand6} rw,