From 56464d24bffe6b8f0d54a41c5ed6cb40e632bf10 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Wed, 12 Jun 2024 22:18:02 +0100
Subject: [PATCH] fix: xdg-desktop-portal breaks screensharing

fix: #376
---
 apparmor.d/abstractions/audio-client             | 3 +++
 apparmor.d/groups/freedesktop/xdg-desktop-portal | 4 +---
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/apparmor.d/abstractions/audio-client b/apparmor.d/abstractions/audio-client
index f12e7fcc..c5734f6f 100644
--- a/apparmor.d/abstractions/audio-client
+++ b/apparmor.d/abstractions/audio-client
@@ -41,6 +41,9 @@
   owner @{user_config_dirs}/pulse/client.conf.d/{,*.conf} r,
   owner @{user_config_dirs}/pulse/cookie rwk,
 
+  owner @{user_config_dirs}/pipewire/ rw,
+  owner @{user_config_dirs}/pipewire/client.conf r,
+
   owner @{user_share_dirs}/openal/hrtf/{,**} r,
   owner @{user_share_dirs}/sounds/__custom/index.theme r,
 
diff --git a/apparmor.d/groups/freedesktop/xdg-desktop-portal b/apparmor.d/groups/freedesktop/xdg-desktop-portal
index b8ee7c4a..2fef3f62 100644
--- a/apparmor.d/groups/freedesktop/xdg-desktop-portal
+++ b/apparmor.d/groups/freedesktop/xdg-desktop-portal
@@ -10,6 +10,7 @@ include <tunables/global>
 profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/app-open>
+  include <abstractions/audio-client>
   include <abstractions/bus-session>
   include <abstractions/bus-system>
   include <abstractions/bus/net.hadess.PowerProfiles>
@@ -70,10 +71,8 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
   /.flatpak-info r,
 
   /usr/share/dconf/profile/gdm r,
-  /usr/share/pipewire/client.conf r,
   /usr/share/xdg-desktop-portal/** r,
 
-  /etc/pipewire/client.conf.d/ r,
   /etc/sysconfig/proxy r,
 
   /var/lib/gdm{,3}/greeter-dconf-defaults r,
@@ -83,7 +82,6 @@ profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
   owner @{tmp}/icon* rw,
 
   owner @{run}/user/@{uid}/.flatpak/{,*/*} r,
-  owner @{run}/user/@{uid}/pipewire-@{int} rw,
 
         @{PROC}/ r,
         @{PROC}/*/ r,