diff --git a/apparmor.d/groups/gnome/gnome-shell b/apparmor.d/groups/gnome/gnome-shell index 66560700..34664624 100644 --- a/apparmor.d/groups/gnome/gnome-shell +++ b/apparmor.d/groups/gnome/gnome-shell @@ -20,6 +20,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) { include capability sys_nice, + capability sys_ptrace, network inet stream, network inet6 stream, diff --git a/apparmor.d/groups/gnome/tracker-extract b/apparmor.d/groups/gnome/tracker-extract index cbb7dad9..9efd8a64 100644 --- a/apparmor.d/groups/gnome/tracker-extract +++ b/apparmor.d/groups/gnome/tracker-extract @@ -20,8 +20,14 @@ profile tracker-extract @{exec_path} { /usr/share/applications/*.desktop r, /usr/share/mime/mime.cache r, + owner @{user_cache_dirs}/tracker3/files/{,**} rwk, owner @{user_share_dirs}/gvfs-metadata/** r, + # Allow to search user files + owner @{HOME}/{,**} r, + owner @{MOUNTS}/*/{,**} r, + owner /tmp/*/{,**} r, + include owner @{run}/user/@{uid}/dconf/ rw, owner @{run}/user/@{uid}/dconf/user rw,