diff --git a/apparmor.d/groups/gnome/tracker-extract b/apparmor.d/groups/gnome/tracker-extract new file mode 100644 index 00000000..01d2c290 --- /dev/null +++ b/apparmor.d/groups/gnome/tracker-extract @@ -0,0 +1,32 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}lib/tracker-extract-3 +profile tracker-extract @{exec_path} { + include + include + include + + @{exec_path} mr, + + /usr/share/tracker3/{,**} r, + /usr/share/tracker3-miners/{,**} r, + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/applications/*.desktop r, + /usr/share/mime/mime.cache r, + + owner @{user_share_dirs}/gvfs-metadata/** r, + + include + owner @{run}/user/[0-9]*/dconf/ rw, + owner @{run}/user/[0-9]*/dconf/user rw, + + /tmp/tracker-extract-3-files.*/{,*} rw, + + include if exists +}