diff --git a/apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome b/apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome index fecaa51b..89135381 100644 --- a/apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome +++ b/apparmor.d/groups/freedesktop/xdg-desktop-portal-gnome @@ -72,6 +72,7 @@ profile xdg-desktop-portal-gnome @{exec_path} flags=(attach_disconnected) { owner @{HOME}/ r, owner @{HOME}/*/{,**} rw, + owner @{MOUNTS}/ r, owner @{tmp}/.goutputstream-@{rand6} rw, owner @{tmp}/@{rand6} rw, diff --git a/apparmor.d/groups/freedesktop/xdg-document-portal b/apparmor.d/groups/freedesktop/xdg-document-portal index 86633e72..2735c863 100644 --- a/apparmor.d/groups/freedesktop/xdg-document-portal +++ b/apparmor.d/groups/freedesktop/xdg-document-portal @@ -42,7 +42,9 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) { / r, owner /.flatpak-info r, - owner @{HOME}/** r, + owner @{HOME}/ r, + owner @{HOME}/*/{,**} rw, + owner @{MOUNTS}/ r, owner @{user_share_dirs}/flatpak/db/documents r, owner @{user_share_dirs}/Trash/files/** r, @@ -54,8 +56,8 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pid}/cgroup r, owner @{PROC}/@{pid}/fd/ r, - /dev/fuse rw, - owner /dev/tty@{int} rw, + /dev/fuse rw, + owner /dev/tty@{int} rw, profile fusermount { include diff --git a/apparmor.d/profiles-s-z/totem b/apparmor.d/profiles-s-z/totem index c75cea7f..ef11ad78 100644 --- a/apparmor.d/profiles-s-z/totem +++ b/apparmor.d/profiles-s-z/totem @@ -35,6 +35,9 @@ profile totem @{exec_path} flags=(attach_disconnected) { /usr/share/grilo-plugins/{,**} r, /usr/share/thumbnailers/{,**} r, + owner @{HOME}/ r, + owner @{MOUNTS}/ r, + owner @{user_music_dirs}/{,**} rw, owner @{user_pictures_dirs}/{,**} rw, owner @{user_torrents_dirs}/{,**} rw, @@ -50,6 +53,8 @@ profile totem @{exec_path} flags=(attach_disconnected) { owner @{run}/user/@{uid}/gvfs/smb-share:server=*,share=**/ r, owner @{run}/user/@{uid}/gvfs/smb-share:server=*,share=** r, + @{run}/mount/utab r, + owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/task/@{tid}/comm w, diff --git a/apparmor.d/profiles-s-z/vlc b/apparmor.d/profiles-s-z/vlc index 5d113ba3..b5ea8b27 100644 --- a/apparmor.d/profiles-s-z/vlc +++ b/apparmor.d/profiles-s-z/vlc @@ -41,6 +41,7 @@ profile vlc @{exec_path} { @{exec_path} mrix, + @{open_path} rPx -> child-open-help, @{bin}/xdg-screensaver rPx, /usr/share/vlc/{,**} r, @@ -48,6 +49,8 @@ profile vlc @{exec_path} { /etc/fstab r, owner @{HOME}/ r, + owner @{MOUNTS}/ r, + owner @{user_music_dirs}/{,**} rw, owner @{user_pictures_dirs}/{,**} rw, owner @{user_torrents_dirs}/{,**} rw,