Fix and optimizations for flameshot profile

Profile simplification PATH and better use for abstractions.
Add permission for @{user_cache_dirs}
This commit is contained in:
Jose Maldonado aka Yukiteru 2024-05-10 14:54:15 -04:00 committed by Alex
parent 3748a13710
commit 60ba9ae965

View file

@ -11,6 +11,7 @@ include <tunables/global>
profile flameshot @{exec_path} {
include <abstractions/base>
include <abstractions/desktop>
include <abstractions/dconf-write>
include <abstractions/fontconfig-cache-read>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
@ -35,13 +36,13 @@ profile flameshot @{exec_path} {
/var/lib/dbus/machine-id r,
/etc/machine-id r,
/usr/share/flameshot/translations/* r,
/usr/share/flameshot/{,**} r,
owner @{user_config_dirs}/dconf/user r,
owner @{user_cache_dirs}/flameshot/ rw,
owner @{user_cache_dirs}/flameshot/** rw,
owner @{user_config_dirs}/flameshot/ rw,
owner @{user_config_dirs}/flameshot/** rwlk -> @{user_config_dirs}/flameshot/**,
owner @{user_config_dirs}/ibus/bus/@{hex32}-unix-wayland-0 r,
owner @{run}/user/@{uid}/dconf/user rw,
owner @{user_config_dirs}/ibus/bus/@{hex32}-unix-{,wayland-}@{int} r,
owner @{tmp}/*= rw,
owner @{tmp}/*.png rw,