From 4bcfcb25c6a1c87f144e7e4517f06859cd17790e Mon Sep 17 00:00:00 2001
From: curiosityseeker <60518106+curiosityseeker@users.noreply.github.com>
Date: Fri, 3 Mar 2023 12:54:49 +0100
Subject: [PATCH] Adding capability net_admin (#130)

capability net_admin is needed to prevent breaking the boot process on Arch Linux with KDE.
---
 apparmor.d/profiles-s-z/sddm | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/apparmor.d/profiles-s-z/sddm b/apparmor.d/profiles-s-z/sddm
index 210cf590..427fd733 100644
--- a/apparmor.d/profiles-s-z/sddm
+++ b/apparmor.d/profiles-s-z/sddm
@@ -52,11 +52,13 @@ profile sddm @{exec_path} {
 
   # To read the /var/lib/sddm/state.conf file
   capability dac_read_search,
+  
+  # To prevent breaking the boot process
+  capability net_admin,
 
   # Needed?
   #capability sys_tty_config,
-  deny capability net_admin,
-
+  
   ptrace (trace) peer=@{profile_name},
 
   signal (send) set=(kill, term) peer=xorg,
@@ -144,6 +146,7 @@ profile sddm @{exec_path} {
   owner @{HOME}/.Xauthority rw,
 
   /etc/default/locale r,
+  /etc/locale.conf
   @{etc_ro}/environment r,
 
   owner @{PROC}/@{pid}/loginuid rw,