diff --git a/apparmor.d/groups/kde/plasmashell b/apparmor.d/groups/kde/plasmashell index c6a65cae..cf7642dd 100644 --- a/apparmor.d/groups/kde/plasmashell +++ b/apparmor.d/groups/kde/plasmashell @@ -17,6 +17,8 @@ profile plasmashell @{exec_path} { include include include + include + include include network inet stream, @@ -34,6 +36,7 @@ profile plasmashell @{exec_path} { /usr/share/hwdata/*.ids r, /usr/share/kservices5/{,**} r, /usr/share/kservicetypes5/{,**} r, + /usr/share/mime/{,**} r, /usr/share/plasma/{,**} r, /usr/share/qt/translations/*.qm r, /usr/share/solid/actions/{,**} r, @@ -43,6 +46,7 @@ profile plasmashell @{exec_path} { /usr/share/akonadi/firstrun/{,*} r, /etc/appstream.conf r, + /etc/pulse/client.conf r, /etc/xdg/taskmanagerrulesrc r, /etc/xdg/menus/ r, /etc/machine-id r, @@ -53,7 +57,10 @@ profile plasmashell @{exec_path} { owner @{user_cache_dirs}/#[0-9]* rw, owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/ksycoca5_* r, + owner @{user_cache_dirs}/org.kde.dirmodel-qml.kcache rw, + owner @{user_share_dirs}/plasma_icons/*.desktop r, owner @{user_cache_dirs}/plasma-svgelements* rwl, + owner @{user_cache_dirs}/plasma_theme_default_v*.kcache rw, owner @{user_cache_dirs}/plasmashell/qmlcache/{,**} rwl, owner @{user_config_dirs}/*kde*.desktop* r, @@ -65,24 +72,41 @@ profile plasmashell @{exec_path} { owner @{user_config_dirs}/kdedefaults/kdeglobals r, owner @{user_config_dirs}/kdedefaults/kwinrc r, owner @{user_config_dirs}/kdedefaults/plasmarc r, + owner @{user_config_dirs}/krunnerrc r, owner @{user_config_dirs}/kdeglobals r, + owner @{user_config_dirs}/klipperrc r, owner @{user_config_dirs}/ksmserverrc r, owner @{user_config_dirs}/kwinrc r, + owner @{user_config_dirs}/menus/{,**} r, owner @{user_config_dirs}/plasma*desktop* rwlk, + owner @{user_config_dirs}/plasmanotifyrc r, + owner @{user_config_dirs}/plasmaparc r, owner @{user_config_dirs}/plasmashellrc r, - + owner @{user_config_dirs}/pulse/cookie k, + owner @{user_config_dirs}/trashrc r, + owner @{user_share_dirs}/#[0-9]* rw, owner @{user_share_dirs}/akonadi/search_db/{,**} r, + owner @{user_share_dirs}/kactivitymanagerd/resources/database k, + owner @{user_share_dirs}/kactivitymanagerd/resources/database-wal rw, + owner @{user_share_dirs}/kactivitymanagerd/resources/database-shm rwk, owner @{user_share_dirs}/klipper/{,*} rwl, owner @{user_share_dirs}/krunnerstaterc.lock rwk, owner @{user_share_dirs}/krunnerstaterc* rwk, + owner @{user_share_dirs}/user-places.xbel r, owner @{run}/user/@{uid}/#[0-9]* rw, owner @{run}/user/@{uid}/plasmashell??????.[0-9].kioworker.socket rwl, + owner @{run}/user/@{uid}/gvfs/ r, + owner @{run}/user/@{uid}/pulse/ r, @{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/random/boot_id r, owner @{PROC}/@{pid}/mounts r, + + @{sys}/bus/{,**} r, + @{sys}/class/ r, + include if exists -} \ No newline at end of file +}