diff --git a/apparmor.d/groups/freedesktop/polkit-kde-authentication-agent b/apparmor.d/groups/freedesktop/polkit-kde-authentication-agent index 82bc555d..164d40ab 100644 --- a/apparmor.d/groups/freedesktop/polkit-kde-authentication-agent +++ b/apparmor.d/groups/freedesktop/polkit-kde-authentication-agent @@ -9,7 +9,7 @@ include @{exec_path} = @{lib}/@{multiarch}/{,libexec/}polkit-kde-authentication-agent-[0-9] @{exec_path} += @{lib}/polkit-kde-authentication-agent-[0-9] -profile polkit-kde-authentication-agent @{exec_path} flags=(attach_disconnected) { +profile polkit-kde-authentication-agent @{exec_path} flags=(attach_disconnected,mediate_deleted) { include include include @@ -34,9 +34,14 @@ profile polkit-kde-authentication-agent @{exec_path} flags=(attach_disconnected) /var/lib/dbus/machine-id r, owner @{user_config_dirs}/breezerc r, + owner @{user_config_dirs}/kdedefaults/plasmarc r, owner @{user_cache_dirs}/icon-cache.kcache rw, - + owner @{user_cache_dirs}/polkit-kde-authentication-agent-@{int}/ rw, + owner @{user_cache_dirs}/polkit-kde-authentication-agent-@{int}/** rwk, + owner link @{user_cache_dirs}/polkit-kde-authentication-agent-@{int}/** -> @{user_cache_dirs}/polkit-kde-authentication-agent-@{int}/**, + owner @{user_cache_dirs}/qtshadercache-*/* r, + owner @{tmp}/#@{int} rw, owner @{tmp}/polkit-kde-authentication-agent-[0-9].* rwl -> /tmp/#@{int}, # owner /tmp/xauth_@{rand6} r, diff --git a/dists/flags/main.flags b/dists/flags/main.flags index 436c1c28..733f75ee 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -269,7 +269,7 @@ plasmashell attach_disconnected,mediate_deleted,complain plymouth complain plymouth-set-default-theme attach_disconnected,complain plymouthd complain -polkit-kde-authentication-agent attach_disconnected,complain +polkit-kde-authentication-agent attach_disconnected,complain,mediate_deleted qdbus complain realmd complain remmina complain