feat(profile): better kde integration.

See #237
roddhjav · Nov 30, 2023 · 796cf32 · 796cf32
1 parent c27ec45
commit 796cf32
Show file tree

Hide file tree

Showing 5 changed files with 11 additions and 0 deletions.
diff --git a/apparmor.d/groups/kde/baloorunner b/apparmor.d/groups/kde/baloorunner
@@ -19,6 +19,8 @@ profile baloorunner @{exec_path} {
 
   @{exec_path} mr,
 
+  @{bin}/dolphin rPx,
+
   /usr/share/hwdata/*.ids r,
   /usr/share/icu/@{int}.@{int}/*.dat r,
 

diff --git a/apparmor.d/groups/kde/dolphin b/apparmor.d/groups/kde/dolphin
@@ -18,6 +18,7 @@ profile dolphin @{exec_path} {
   include <abstractions/nameservice-strict>
   include <abstractions/qt5>
   include <abstractions/vulkan>
+  include <abstractions/X-strict>
 
   network netlink raw,
 
@@ -27,6 +28,8 @@ profile dolphin @{exec_path} {
 
   @{bin}/konsole       rPUx,
   @{bin}/ldd            rix,
+  @{bin}/net           rPUx,
+  @{bin}/testparm      rPUx,
   @{lib}/kf5/kioslave5  rPx,
 
   /usr/share/kf5/kmoretools/{,**} r,

diff --git a/apparmor.d/groups/kde/kauth-backlighthelper b/apparmor.d/groups/kde/kauth-backlighthelper
@@ -20,6 +20,7 @@ profile kauth-backlighthelper @{exec_path} {
 
   @{sys}/class/backlight/ r,
   @{sys}/class/leds/ r,
+  @{sys}/devices/@{pci}/backlight/**/brightness rw,
 
   /dev/tty r,
 

diff --git a/apparmor.d/groups/kde/kiod5 b/apparmor.d/groups/kde/kiod5
@@ -15,6 +15,8 @@ profile kiod5 @{exec_path} {
   include <abstractions/openssl>
   include <abstractions/vulkan>
 
+  network netlink raw,
+
   @{exec_path} mr,
 
   /usr/share/icons/breeze/index.theme r,
@@ -33,6 +35,8 @@ profile kiod5 @{exec_path} {
   owner @{user_config_dirs}/ksslcertificatemanager.lock rwk,
   owner @{user_config_dirs}/kwinrc r,
 
+  owner @{PROC}/@{pid}/mounts r,
+
   /dev/tty r,
 
   include if exists <local/kiod5>

diff --git a/apparmor.d/groups/kde/kioslave5 b/apparmor.d/groups/kde/kioslave5
@@ -16,6 +16,7 @@ profile kioslave5 @{exec_path} {
   include <abstractions/freedesktop.org>
   include <abstractions/mesa>
   include <abstractions/nameservice-strict>
+  include <abstractions/nvidia>
   include <abstractions/openssl>
   include <abstractions/qt5>
   include <abstractions/ssl_certs>