diff --git a/apparmor.d/groups/kde/kded5 b/apparmor.d/groups/kde/kded5 index c42b1715..a3dcda46 100644 --- a/apparmor.d/groups/kde/kded5 +++ b/apparmor.d/groups/kde/kded5 @@ -115,6 +115,7 @@ profile kded5 @{exec_path} { owner @{user_share_dirs}/services5/{,**} r, @{run}/mount/utab r, + @{run}/udev/data/c189:@{int} r, # for /dev/bus/usb/** owner @{run}/user/@{uid}/#@{int} rw, owner @{run}/user/@{uid}/gvfs/ r, owner @{run}/user/@{uid}/kded5*kioworker.socket rwl, diff --git a/apparmor.d/groups/kde/plasmashell b/apparmor.d/groups/kde/plasmashell index f14c6526..e34c357a 100644 --- a/apparmor.d/groups/kde/plasmashell +++ b/apparmor.d/groups/kde/plasmashell @@ -167,7 +167,8 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) { @{sys}/bus/ r, @{sys}/bus/usb/devices/ r, - @{sys}/class/{,*} r, + @{sys}/class/{,**} r, + @{sys}/devices/platform/** r, @{sys}/devices/pci[0-9]*/**/name r, @{sys}/devices/virtual/thermal/thermal_zone@{int}/hwmon@{int}/ r, diff --git a/apparmor.d/groups/pacman/pacman b/apparmor.d/groups/pacman/pacman index 89d2f44e..e6722051 100644 --- a/apparmor.d/groups/pacman/pacman +++ b/apparmor.d/groups/pacman/pacman @@ -56,6 +56,7 @@ profile pacman @{exec_path} { @{bin}/archlinux-java rPx, @{bin}/bootctl rPx, @{bin}/cat rix, + @{bin}/cert-sync rPx, @{bin}/checkrebuild rPUx, @{bin}/chgrp rix, @{bin}/chmod rix, diff --git a/apparmor.d/groups/systemd/systemd-binfmt b/apparmor.d/groups/systemd/systemd-binfmt index 7cd0f96c..405fdd9a 100644 --- a/apparmor.d/groups/systemd/systemd-binfmt +++ b/apparmor.d/groups/systemd/systemd-binfmt @@ -30,6 +30,9 @@ profile systemd-binfmt @{exec_path} flags=(attach_disconnected) { @{PROC}/sys/kernel/osrelease r, owner @{PROC}/@{pid}/stat r, + /dev/tty@{int} rw, + /dev/pts/@{int} rw, + deny /apparmor/.null rw, include if exists diff --git a/apparmor.d/profiles-s-z/swapoff b/apparmor.d/profiles-s-z/swapoff index 8478f278..8c10f2d7 100644 --- a/apparmor.d/profiles-s-z/swapoff +++ b/apparmor.d/profiles-s-z/swapoff @@ -22,6 +22,8 @@ profile swapoff @{exec_path} { # SWAP file common locations owner /swapfile rw, + /dev/pts/@{int} rw, + include if exists } diff --git a/apparmor.d/profiles-s-z/swapon b/apparmor.d/profiles-s-z/swapon index fc12943a..596e2cc1 100644 --- a/apparmor.d/profiles-s-z/swapon +++ b/apparmor.d/profiles-s-z/swapon @@ -23,5 +23,7 @@ profile swapon @{exec_path} { @{PROC}/swaps r, + /dev/pts/@{int} rw, + include if exists }