From 50ce9750d3a9584c0087ce0cd0ca2eee6fa3a7c7 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Tue, 9 Apr 2024 23:34:45 +0100
Subject: [PATCH] feat(abs): add common gnome abstraction for gnome UI app.

---
 apparmor.d/abstractions/common/gnome | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 apparmor.d/abstractions/common/gnome

diff --git a/apparmor.d/abstractions/common/gnome b/apparmor.d/abstractions/common/gnome
new file mode 100644
index 00000000..275853d5
--- /dev/null
+++ b/apparmor.d/abstractions/common/gnome
@@ -0,0 +1,27 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+# Minimal set of rules for all gnome based UI application.
+
+  include <abstractions/bus-session>
+  include <abstractions/dconf-write>
+  include <abstractions/gnome-strict>
+  include <abstractions/graphics>
+
+  @{open_path}  rPx -> child-open-help,
+
+  /usr/share/@{profile_name}/{,**} r,
+
+  owner @{user_cache_dirs}/@{profile_name}/ rw,
+  owner @{user_cache_dirs}/@{profile_name}/** rwlk,
+
+  owner @{user_config_dirs}/@{profile_name}/ rw,
+  owner @{user_config_dirs}/@{profile_name}/** rwlk,
+
+  owner @{user_share_dirs}/@{profile_name}/ rw,
+  owner @{user_share_dirs}/@{profile_name}/** rwlk,
+
+  owner @{PROC}/@{pid}/cmdline r,
+
+  include if exists <abstractions/common/gnome.d>
\ No newline at end of file