feat(profile): better kde integration.

See #237

apparmor.d/groups/kde/baloorunner

@@ -19,6 +19,8 @@ profile baloorunner @{exec_path} {
 
   @{exec_path} mr,
 
+  @{bin}/dolphin rPx,
+
   /usr/share/hwdata/*.ids r,
   /usr/share/icu/@{int}.@{int}/*.dat r,
 

apparmor.d/groups/kde/dolphin

@@ -18,6 +18,7 @@ profile dolphin @{exec_path} {
   include <abstractions/nameservice-strict>
   include <abstractions/qt5>
   include <abstractions/vulkan>
+  include <abstractions/X-strict>
 
   network netlink raw,
 
@@ -27,6 +28,8 @@ profile dolphin @{exec_path} {
 
   @{bin}/konsole       rPUx,
   @{bin}/ldd            rix,
+  @{bin}/net           rPUx,
+  @{bin}/testparm      rPUx,
   @{lib}/kf5/kioslave5  rPx,
 
   /usr/share/kf5/kmoretools/{,**} r,

apparmor.d/groups/kde/kauth-backlighthelper

@@ -20,6 +20,7 @@ profile kauth-backlighthelper @{exec_path} {
 
   @{sys}/class/backlight/ r,
   @{sys}/class/leds/ r,
+  @{sys}/devices/@{pci}/backlight/**/brightness rw,
 
   /dev/tty r,
 

apparmor.d/groups/kde/kiod5

@@ -15,6 +15,8 @@ profile kiod5 @{exec_path} {
   include <abstractions/openssl>
   include <abstractions/vulkan>
 
+  network netlink raw,
+
   @{exec_path} mr,
 
   /usr/share/icons/breeze/index.theme r,
@@ -33,6 +35,8 @@ profile kiod5 @{exec_path} {
   owner @{user_config_dirs}/ksslcertificatemanager.lock rwk,
   owner @{user_config_dirs}/kwinrc r,
 
+  owner @{PROC}/@{pid}/mounts r,
+
   /dev/tty r,
 
   include if exists <local/kiod5>

apparmor.d/groups/kde/kioslave5

@@ -16,6 +16,7 @@ profile kioslave5 @{exec_path} {
   include <abstractions/freedesktop.org>
   include <abstractions/mesa>
   include <abstractions/nameservice-strict>
+  include <abstractions/nvidia>
   include <abstractions/openssl>
   include <abstractions/qt5>
   include <abstractions/ssl_certs>