diff --git a/apparmor.d/groups/freedesktop/polkit-gnome-authentication-agent b/apparmor.d/groups/freedesktop/polkit-gnome-authentication-agent new file mode 100644 index 00000000..5f48d5c2 --- /dev/null +++ b/apparmor.d/groups/freedesktop/polkit-gnome-authentication-agent @@ -0,0 +1,23 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{lib}/@{multiarch}/{,libexec/}polkit-gnome-authentication-agent-1 +@{exec_path} += @{lib}/policykit-1-gnome/polkit-gnome-authentication-agent-1 +@{exec_path} += @{lib}/polkit-gnome-authentication-agent-1 +@{exec_path} += @{lib}/polkit-gnome/polkit-gnome-authentication-agent-1 +profile polkit-gnome-authentication-agent @{exec_path} { + include + include + include + + @{exec_path} mr, + + @{PROC}/@{pid}/cgroup r, + + include if exists +} \ No newline at end of file