From 1c9df4b3b988e045e628144724dd4f58ae99de73 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Wed, 21 Apr 2021 21:55:01 +0100 Subject: [PATCH] Gnome fixes. --- apparmor.d/groups/gnome/gnome-shell | 1 + apparmor.d/groups/gnome/tracker-extract | 6 ++++++ 2 files changed, 7 insertions(+) diff --git a/apparmor.d/groups/gnome/gnome-shell b/apparmor.d/groups/gnome/gnome-shell index 66560700..34664624 100644 --- a/apparmor.d/groups/gnome/gnome-shell +++ b/apparmor.d/groups/gnome/gnome-shell @@ -20,6 +20,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) { include capability sys_nice, + capability sys_ptrace, network inet stream, network inet6 stream, diff --git a/apparmor.d/groups/gnome/tracker-extract b/apparmor.d/groups/gnome/tracker-extract index cbb7dad9..9efd8a64 100644 --- a/apparmor.d/groups/gnome/tracker-extract +++ b/apparmor.d/groups/gnome/tracker-extract @@ -20,8 +20,14 @@ profile tracker-extract @{exec_path} { /usr/share/applications/*.desktop r, /usr/share/mime/mime.cache r, + owner @{user_cache_dirs}/tracker3/files/{,**} rwk, owner @{user_share_dirs}/gvfs-metadata/** r, + # Allow to search user files + owner @{HOME}/{,**} r, + owner @{MOUNTS}/*/{,**} r, + owner /tmp/*/{,**} r, + include owner @{run}/user/@{uid}/dconf/ rw, owner @{run}/user/@{uid}/dconf/user rw,