diff --git a/apparmor.d/groups/xfce/xfce-notifyd b/apparmor.d/groups/xfce/xfce-notifyd index 450e3472..016da78c 100644 --- a/apparmor.d/groups/xfce/xfce-notifyd +++ b/apparmor.d/groups/xfce/xfce-notifyd @@ -7,7 +7,7 @@ abi , include -@{exec_path} = @{lib}/@{multiarch}/xfce4/notifyd/xfce4-notifyd +@{exec_path} = @{lib}/{,@{multiarch}/}xfce4/notifyd/xfce4-notifyd profile xfce-notifyd @{exec_path} { include include @@ -17,5 +17,8 @@ profile xfce-notifyd @{exec_path} { @{exec_path} mr, + owner @{user_cache_dirs}/xfce4/notifyd/ rw, + owner @{user_cache_dirs}/xfce4/notifyd/** rwk, + include if exists } diff --git a/apparmor.d/groups/xfce/xfconfd b/apparmor.d/groups/xfce/xfconfd index 076149e0..9f930771 100644 --- a/apparmor.d/groups/xfce/xfconfd +++ b/apparmor.d/groups/xfce/xfconfd @@ -7,20 +7,19 @@ abi , include -@{exec_path} = @{lib}/xfce4/xfconf/xfconfd -@{exec_path} += @{lib}/@{multiarch}/xfce4/xfconf/xfconfd +@{exec_path} = @{lib}/{,@{multiarch}/}xfce4/xfconf/xfconfd profile xfconfd @{exec_path} { include include @{exec_path} mr, - /etc/xdg/xfce4/xfconf/*/*.xml r, + /etc/xdg/xfce4/xfconf/** r, owner @{HOME}/ r, owner @{user_config_dirs}/xfce4/ r, - owner @{user_config_dirs}/xfce4/xfconf/*/*.xml{,.new} rw, + owner @{user_config_dirs}/xfce4/xfconf/{,**} rw, owner /dev/tty@{int} rw,