diff --git a/apparmor.d/groups/gnome/tracker-miner b/apparmor.d/groups/gnome/tracker-miner new file mode 100644 index 00000000..a1a8ae16 --- /dev/null +++ b/apparmor.d/groups/gnome/tracker-miner @@ -0,0 +1,42 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-3.0-or-later + +abi , + +include + +@{exec_path} = /{usr/,}lib/tracker-miner-fs-3 +profile tracker-miner @{exec_path} { + include + include + include + + @{exec_path} mr, + + /usr/share/tracker3/{,**} r, + /usr/share/tracker3-miners/{,**} r, + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/applications/{,mimeinfo.cache} r, + /usr/share/mime/mime.cache r, + + owner /var/tmp/etilqs_[0-9a-f]* rw, + + # Allow to search user files + owner @{HOME}/{,**} r, + owner /media/*/{,**} r, + owner /tmp/*/{,**} r, + + owner @{user_share_dirs}/{applications/,mime/mime.cache} r, + owner @{user_config_dirs}/user-dirs.dirs r, + owner @{user_config_dirs}/tracker3/{,**} rwk, + owner @{user_cache_dirs}/tracker3/files/{,**} rwk, + + @{PROC}/sys/fs/inotify/max_user_watches r, + + include + owner @{run}/user/[0-9]*/dconf/ rw, + owner @{run}/user/[0-9]*/dconf/user rw, + + include if exists +}