From 3807a4387ffeb0b9fbc481d422f8c30916c46dc1 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Fri, 2 Apr 2021 10:29:37 +0100
Subject: [PATCH] Finish full gnome support for gvfsd-*.

---
 apparmor.d/groups/gvfs/gvfsd-fuse     | 2 ++
 apparmor.d/groups/gvfs/gvfsd-metadata | 4 ++--
 apparmor.d/groups/gvfs/gvfsd-network  | 4 ++++
 apparmor.d/groups/gvfs/gvfsd-trash    | 4 ++++
 4 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/apparmor.d/groups/gvfs/gvfsd-fuse b/apparmor.d/groups/gvfs/gvfsd-fuse
index 0094e54b..b4883535 100644
--- a/apparmor.d/groups/gvfs/gvfsd-fuse
+++ b/apparmor.d/groups/gvfs/gvfsd-fuse
@@ -17,6 +17,8 @@ profile gvfsd-fuse @{exec_path} {
 
   mount fstype={fuse,fuse.*} -> @{run}/user/[0-9]*/gvfs/,
 
+   @{PROC}/sys/fs/pipe-max-size r,
+
   /dev/fuse rw,
 
   include if exists <local/gvfsd-fuse>
diff --git a/apparmor.d/groups/gvfs/gvfsd-metadata b/apparmor.d/groups/gvfs/gvfsd-metadata
index b727142d..eb8a9e46 100644
--- a/apparmor.d/groups/gvfs/gvfsd-metadata
+++ b/apparmor.d/groups/gvfs/gvfsd-metadata
@@ -16,8 +16,8 @@ profile gvfsd-metadata @{exec_path} {
 
   @{exec_path} mr,
 
-  owner @{user_share_dirs}/gvfs-metadata/ rw,
-  owner @{user_share_dirs}/gvfs-metadata/** rw,
+  owner @{HOME}/.local/share/gvfs-metadata/ rw,
+  owner @{HOME}/.local/share/gvfs-metadata/** rw,
 
   include if exists <local/gvfsd-metadata>
 }
diff --git a/apparmor.d/groups/gvfs/gvfsd-network b/apparmor.d/groups/gvfs/gvfsd-network
index a501165d..328dc671 100644
--- a/apparmor.d/groups/gvfs/gvfsd-network
+++ b/apparmor.d/groups/gvfs/gvfsd-network
@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2021 Mikhail Morfikov
+#               2021 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -13,5 +14,8 @@ profile gvfsd-network @{exec_path} {
 
   @{exec_path} mr,
 
+  owner @{run}/user/[0-9]*/gvfsd/ rw,
+  owner @{run}/user/[0-9]*/gvfsd/socket-[a-zA-z0-9]* rw,
+
   include if exists <local/gvfsd-network>
 }
diff --git a/apparmor.d/groups/gvfs/gvfsd-trash b/apparmor.d/groups/gvfs/gvfsd-trash
index 8eaaca3f..37783436 100644
--- a/apparmor.d/groups/gvfs/gvfsd-trash
+++ b/apparmor.d/groups/gvfs/gvfsd-trash
@@ -1,5 +1,6 @@
 # apparmor.d - Full set of apparmor profiles
 # Copyright (C) 2021 Mikhail Morfikov
+#               2021 Alexandre Pujol <alexandre@pujol.io>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/3.0>,
@@ -25,5 +26,8 @@ profile gvfsd-trash @{exec_path} {
 
   @{run}/mount/utab r,
 
+  owner @{run}/user/[0-9]*/gvfsd/ rw,
+  owner @{run}/user/[0-9]*/gvfsd/socket-[a-zA-z0-9]* rw,
+
   include if exists <local/gvfsd-trash>
 }