diff --git a/apparmor.d/profiles-m-r/plank b/apparmor.d/profiles-m-r/plank new file mode 100644 index 00000000..239b0bda --- /dev/null +++ b/apparmor.d/profiles-m-r/plank @@ -0,0 +1,32 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2023 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/plank +profile plank @{exec_path} flags=(complain) { + include + include + include + include + include + include + include + include + + @{exec_path} rm, + + unix (send, receive, connect) type=stream peer=(addr="@/tmp/.X11-unix/X[0-9]*", label="{xorg,xkbcomp}"), + + @{user_config_dirs}/plank/{,**} rw, + /usr/{,local/}share/plank/{,**} r, + + /usr/{,local/}share/mime/mime.cache r, + /var/lib/flatpak/exports/share/icons/{,**} r, + /var/lib/flatpak/exports/share/mime/mime.cache r, + + include if exists +}