From 9da28096958e92ba5480dddd9745d83a94737270 Mon Sep 17 00:00:00 2001
From: curiosityseeker <60518106+curiosityseeker@users.noreply.github.com>
Date: Tue, 8 Aug 2023 12:23:30 +0200
Subject: [PATCH] Update child-open

Adding gwenview and libreoffice
---
 apparmor.d/groups/children/child-open | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/apparmor.d/groups/children/child-open b/apparmor.d/groups/children/child-open
index 2fc7ca7d..874c771d 100644
--- a/apparmor.d/groups/children/child-open
+++ b/apparmor.d/groups/children/child-open
@@ -19,6 +19,9 @@ include <tunables/global>
 # App allowed to open
 profile child-open {
   include <abstractions/base>
+  include <abstractions/dri-enumerate>
+  include <abstractions/mesa>
+  include <abstractions/vulkan>
   include <abstractions/xdg-open>
 
   @{bin}/exo-open                                     mr,
@@ -73,6 +76,7 @@ profile child-open {
   @{bin}/gnome-calculator rPUx,
   @{bin}/gnome-disk-image-mounter rPx,
   @{bin}/gnome-disks       rPx,
+  @{bin}/gwenview          rPUx,
   @{bin}/kgx               rPx,
   @{bin}/okular            rPx,
   @{bin}/qbittorrent       rPx,
@@ -86,6 +90,11 @@ profile child-open {
   @{bin}/viewnior         rPUx,
   @{bin}/vlc               rPx,
   @{bin}/xarchiver         rPx,
+  @{lib}/libreoffice/program/{soffice,soffice.bin,oosplash} rPUx,
+
+  owner @{user_config_dirs}/menus/{,**} r,
+
+  owner @{run}/user/@{uid}/kioclient*.[0-9]*.kioworker.socket rwl -> @{run}/user/@{uid}/#[0-9]*[0-9],
 
   include if exists <usr/child-open.d>
   include if exists <local/child-open>