From 6c6646e1f6b908d884db56f9fbb7453f73420c72 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Wed, 22 Nov 2023 20:06:39 +0000 Subject: [PATCH] feat(profiles): minor kde additions. --- apparmor.d/groups/akonadi/akonadi_indexing_agent | 2 ++ apparmor.d/groups/kde/plasma-browser-integration-host | 4 ++++ apparmor.d/groups/kde/sddm | 5 ++--- apparmor.d/groups/kde/startplasma | 2 +- 4 files changed, 9 insertions(+), 4 deletions(-) diff --git a/apparmor.d/groups/akonadi/akonadi_indexing_agent b/apparmor.d/groups/akonadi/akonadi_indexing_agent index 1776da83..3b283a26 100644 --- a/apparmor.d/groups/akonadi/akonadi_indexing_agent +++ b/apparmor.d/groups/akonadi/akonadi_indexing_agent @@ -21,6 +21,8 @@ profile akonadi_indexing_agent @{exec_path} { @{exec_path} mr, + @{bin}/akonadi_html_to_text rix, + /usr/share/akonadi/plugins/serializer/ r, /usr/share/akonadi/plugins/serializer/*.desktop r, /usr/share/hwdata/*.ids r, diff --git a/apparmor.d/groups/kde/plasma-browser-integration-host b/apparmor.d/groups/kde/plasma-browser-integration-host index 9b4b797c..fd748c55 100644 --- a/apparmor.d/groups/kde/plasma-browser-integration-host +++ b/apparmor.d/groups/kde/plasma-browser-integration-host @@ -25,6 +25,10 @@ profile plasma-browser-integration-host @{exec_path} { @{exec_path} mr, /usr/share/kservices5/{,**} r, + /usr/share/mime/ r, + + /etc/xdg/menus/ r, + /etc/xdg/taskmanagerrulesrc r, owner @{user_cache_dirs}/ksycoca5_* r, owner @{user_cache_dirs}/icon-cache.kcache rw, diff --git a/apparmor.d/groups/kde/sddm b/apparmor.d/groups/kde/sddm index 2ab46af2..c1d5aa8e 100644 --- a/apparmor.d/groups/kde/sddm +++ b/apparmor.d/groups/kde/sddm @@ -36,8 +36,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) { network netlink raw, - ptrace (read) peer=kwalletd5, - ptrace (read) peer=unconfined, + ptrace (read), ptrace (trace) peer=@{profile_name}, signal (send) set=term peer=kwin_wayland, @@ -140,10 +139,10 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) { owner @{user_share_dirs}/sddm/xorg-session.log w, /tmp/sddm-* rw, + /tmp/xauth_@{rand6} rwl -> /tmp/#@{int}, owner /tmp/*/{,s} rw, owner /tmp/#@{int} rw, owner /tmp/sddm-auth* rw, - owner /tmp/xauth_@{rand6} rwl -> /tmp/#@{int}, @{run}/faillock/[a-zA-z0-9]* rwk, @{run}/sddm.pid rw, diff --git a/apparmor.d/groups/kde/startplasma b/apparmor.d/groups/kde/startplasma index 4e48363e..b4f32b3f 100644 --- a/apparmor.d/groups/kde/startplasma +++ b/apparmor.d/groups/kde/startplasma @@ -41,7 +41,7 @@ profile startplasma @{exec_path} { owner @{user_cache_dirs}/ rw, owner @{user_cache_dirs}/#@{int} rw, owner @{user_cache_dirs}/kcrash-metadata/ rw, - owner @{user_cache_dirs}/ksycoca5_* rwkl -> @{user_cache_dirs}/#@{int}, + @{user_cache_dirs}/ksycoca5_* rwkl -> @{user_cache_dirs}/#@{int}, owner @{user_cache_dirs}/plasma-svgelements rw, owner @{user_config_dirs}/#@{int} rw,