From 388b1fbc87ba8239ee199edad776d4b254952292 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Thu, 21 Nov 2024 19:53:59 +0000
Subject: [PATCH] feat(profile): add profile for tecla.

---
 apparmor.d/groups/gnome/gnome-control-center |  2 +-
 apparmor.d/groups/gnome/gnome-shell          |  1 +
 apparmor.d/groups/gnome/tecla                | 19 +++++++++++++++++++
 3 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100644 apparmor.d/groups/gnome/tecla

diff --git a/apparmor.d/groups/gnome/gnome-control-center b/apparmor.d/groups/gnome/gnome-control-center
index 00bc15f1..91f49c21 100644
--- a/apparmor.d/groups/gnome/gnome-control-center
+++ b/apparmor.d/groups/gnome/gnome-control-center
@@ -55,7 +55,7 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
   @{bin}/grep          rix,
   @{bin}/locale        rix,
   @{bin}/sed           rix,
-  @{bin}/tecla         rix,
+  @{bin}/tecla         rPx,
 
   @{bin}/bwrap                                   rCx -> bwrap,
   @{bin}/gkbd-keyboard-display                   rPx,
diff --git a/apparmor.d/groups/gnome/gnome-shell b/apparmor.d/groups/gnome/gnome-shell
index f52340d4..46273387 100644
--- a/apparmor.d/groups/gnome/gnome-shell
+++ b/apparmor.d/groups/gnome/gnome-shell
@@ -175,6 +175,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
   @{bin}/glib-compile-schemas   rPx,
   @{bin}/ibus-daemon            rPx,
   @{bin}/Xwayland               rPx,
+  @{bin}/tecla                  rPx,
   @{lib}/{,NetworkManager/}nm-openvpn-auth-dialog rPx,
   @{lib}/mutter-x11-frames      rPx,
   #aa:exec polkit-agent-helper
diff --git a/apparmor.d/groups/gnome/tecla b/apparmor.d/groups/gnome/tecla
new file mode 100644
index 00000000..082c6c92
--- /dev/null
+++ b/apparmor.d/groups/gnome/tecla
@@ -0,0 +1,19 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/tecla
+profile tecla @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/common/gnome>
+
+  @{exec_path} mr,
+
+  include if exists <local/tecla>
+}
+
+# vim:syntax=apparmor