# vim:syntax=apparmor # ------------------------------------------------------------------ # # Copyright (C) 2018-2021 Mikhail Morfikov # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ abi , include @{exec_path} = /{usr/,}lib/systemd/systemd-backlight profile systemd-backlight @{exec_path} flags=(complain) { include include # Needed? deny capability net_admin, @{exec_path} mr, @{sys}/bus/ r, @{sys}/class/ r, @{sys}/class/backlight/ r, @{sys}/devices/pci[0-9]*/**/class r, @{sys}/devices/pci[0-9]*/**/backlight/**/brightness rw, @{sys}/devices/pci[0-9]*/**/backlight/**/{max_brightness,actual_brightness} r, @{sys}/devices/pci[0-9]*/**/backlight/**/{uevent,type} r, @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/brightness rw, @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/{max_brightness,actual_brightness} r, @{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/{uevent,type} r, @{sys}/devices/platform/**/leds/*backlight*/uevent r, @{sys}/devices/platform/**/leds/*backlight*/max_brightness r, @{sys}/devices/platform/**/leds/*backlight*/brightness rw, @{run}/udev/data/+backlight:* r, @{run}/udev/data/+leds:*backlight* r, /var/lib/systemd/backlight/*backlight* rw, }