diff --git a/apparmor.d/groups/gnome/gnome-disks b/apparmor.d/groups/gnome/gnome-disks new file mode 100644 index 00000000..b3b6e7fc --- /dev/null +++ b/apparmor.d/groups/gnome/gnome-disks @@ -0,0 +1,28 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/gnome-disks +profile gnome-disks @{exec_path} { + include + include + include + + @{exec_path} mr, + + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/X11/xkb/{,**} r, + + include + owner @{run}/user/@{uid}/dconf/ rw, + owner @{run}/user/@{uid}/dconf/user rw, + + @{PROC}/1/cgroup r, + owner @{PROC}/@{pid}/cgroup r, + + include if exists +} \ No newline at end of file