From d192faf94a9f5fdb03f5c777192ded7ffdc055fa Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 2 Apr 2023 12:07:20 +0100
Subject: [PATCH] fix(kde): minor profile fixes.

See #134
---
 apparmor.d/groups/freedesktop/at-spi-bus-launcher    | 2 +-
 apparmor.d/groups/freedesktop/at-spi2-registryd      | 2 +-
 apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk | 2 +-
 apparmor.d/groups/freedesktop/xprop                  | 2 +-
 apparmor.d/groups/freedesktop/xrdb                   | 2 +-
 apparmor.d/groups/kde/ksmserver                      | 2 +-
 apparmor.d/groups/kde/kwalletd5                      | 2 +-
 apparmor.d/profiles-s-z/xauth                        | 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/apparmor.d/groups/freedesktop/at-spi-bus-launcher b/apparmor.d/groups/freedesktop/at-spi-bus-launcher
index e8151475..f8b0c21b 100644
--- a/apparmor.d/groups/freedesktop/at-spi-bus-launcher
+++ b/apparmor.d/groups/freedesktop/at-spi-bus-launcher
@@ -39,7 +39,7 @@ profile at-spi-bus-launcher @{exec_path} flags=(attach_disconnected) {
   owner @{HOME}/.Xauthority r,
   owner @{HOME}/.xsession-errors w,
 
-  owner /tmp/runtime-cb/xauth_?????? r,
+  owner /tmp/runtime-*/xauth_?????? r,
 
   owner @{run}/user/@{uid}/gdm/Xauthority r,
 
diff --git a/apparmor.d/groups/freedesktop/at-spi2-registryd b/apparmor.d/groups/freedesktop/at-spi2-registryd
index ae5e5597..d6d922cc 100644
--- a/apparmor.d/groups/freedesktop/at-spi2-registryd
+++ b/apparmor.d/groups/freedesktop/at-spi2-registryd
@@ -89,7 +89,7 @@ profile at-spi2-registryd @{exec_path} flags=(attach_disconnected) {
   owner @{HOME}/.Xauthority r,
   owner @{HOME}/.xsession-errors w,
 
-  owner /tmp/runtime-cb/xauth_?????? r,
+  owner /tmp/runtime-*/xauth_?????? r,
 
   owner @{run}/user/@{uid}/gdm/Xauthority r,
 
diff --git a/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk b/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
index 0d1a6f77..726deaa0 100644
--- a/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
+++ b/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk
@@ -163,7 +163,7 @@ profile xdg-desktop-portal-gtk @{exec_path} {
   owner @{HOME}/.icons/{,**} r,
   owner @{HOME}/@{XDG_DATA_HOME}/ r,
 
-  owner /tmp/runtime-cb/xauth_?????? r,
+  owner /tmp/runtime-*/xauth_?????? r,
 
         @{run}/mount/utab r,
   owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw,
diff --git a/apparmor.d/groups/freedesktop/xprop b/apparmor.d/groups/freedesktop/xprop
index 77c8bc2d..c1c2b704 100644
--- a/apparmor.d/groups/freedesktop/xprop
+++ b/apparmor.d/groups/freedesktop/xprop
@@ -18,7 +18,7 @@ profile xprop @{exec_path} {
   owner @{HOME}/.Xauthority r,
   owner @{HOME}/.icons/default/index.theme r,
   
-  owner /tmp/runtime-cb/xauth_?????? r,
+  owner /tmp/runtime-*/xauth_?????? r,
 
   # file_inherit
   owner /dev/tty[0-9]* rw,
diff --git a/apparmor.d/groups/freedesktop/xrdb b/apparmor.d/groups/freedesktop/xrdb
index 119b7ed6..9730ea30 100644
--- a/apparmor.d/groups/freedesktop/xrdb
+++ b/apparmor.d/groups/freedesktop/xrdb
@@ -31,7 +31,7 @@ profile xrdb @{exec_path} {
   owner @{user_config_dirs}/Xresources/* r,
 
   owner /tmp/kcminit.* r,
-  owner /tmp/runtime-cb/xauth_?????? r,
+  owner /tmp/runtime-*/xauth_?????? r,
   owner /tmp/startplasma-x11.?????? r,
   owner /tmp/xauth-[0-9]*-_[0-9] r,
 
diff --git a/apparmor.d/groups/kde/ksmserver b/apparmor.d/groups/kde/ksmserver
index 4310411e..ecc7b10d 100644
--- a/apparmor.d/groups/kde/ksmserver
+++ b/apparmor.d/groups/kde/ksmserver
@@ -17,7 +17,7 @@ profile ksmserver @{exec_path} flags=(attach_disconnected) {
 
   /{usr/,}bin/rm rix,
 
-  /{usr/,}lib/kscreenlocker_greet rPx,
+  @{libexec}/kscreenlocker_greet rPx,
 
   /usr/share/color-schemes/{,**} r,
   /usr/share/hwdata/pnp.ids r,
diff --git a/apparmor.d/groups/kde/kwalletd5 b/apparmor.d/groups/kde/kwalletd5
index 95334763..d0f93412 100644
--- a/apparmor.d/groups/kde/kwalletd5
+++ b/apparmor.d/groups/kde/kwalletd5
@@ -58,7 +58,7 @@ profile kwalletd5 @{exec_path} {
   owner @{user_share_dirs}/kwalletd/#[0-9]*[0-9] rw,
 
   owner /tmp/kwalletd5.* rw,
-  owner /tmp/runtime-cb/xauth_?????? r,
+  owner /tmp/runtime-*/xauth_?????? r,
 
         @{PROC}/sys/kernel/core_pattern r,
   owner @{PROC}/@{pid}/cmdline r,
diff --git a/apparmor.d/profiles-s-z/xauth b/apparmor.d/profiles-s-z/xauth
index 51a9f8f6..7cd51d35 100644
--- a/apparmor.d/profiles-s-z/xauth
+++ b/apparmor.d/profiles-s-z/xauth
@@ -32,7 +32,7 @@ profile xauth @{exec_path} {
   owner /tmp/serverauth.*   rwl -> /tmp/serverauth.*-n,
 
   owner @{run}/run/user/@{uid}/xauth_?????? r,
-  owner /tmp/runtime-cb/xauth_?????? r,
+  owner /tmp/runtime-*/xauth_?????? r,
 
   include if exists <local/xauth>
 }