fix(apparmor): Backport qt5 abstraction for v2.12.1 profile

AppArmor 2.12.1 does not have qt5 abstraction, with Qt5-related rules. Backport qt5 abstraction from AppArmor upstream as inline rules.
qTox · Mar 25, 2019 · 6aa4435 · 6aa4435
1 parent 5fad77b
commit 6aa4435
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/security/apparmor/2.12.1/usr.bin.qtox b/security/apparmor/2.12.1/usr.bin.qtox
@@ -126,6 +126,28 @@ profile qtox /usr{,/local}/bin/qtox {
   owner @{HOME}/.cache/mesa_shader_cache/??/* rwk,
   # End of backported mesa abstraction
 
+  # Backport qt5 abstraction
+  # commit 67816c42cfbadd85aa5cbb086284076c4c289881
+
+  # Additional libraries
+
+  /usr/lib{,64,/@{multiarch}}/qt5/plugins/**.so mr,
+  /usr/lib{,64,/@{multiarch}}/qt5/qml/**.so mr,
+  /usr/lib{,64,/@{multiarch}}/qt5/qml/**.{qmlc,jsc} mr, # Precompiled QML/JavaScript modules
+
+  # System files
+
+  /etc/xdg/QtProject/qtlogging.ini r,
+  /usr/share/qt5/translations/*.qm r,
+  /usr/lib{,64,/@{multiarch}}/qt5/plugins/** r,
+  /usr/lib{,64,/@{multiarch}}/qt5/qml/** r,
+
+  # User files
+
+  owner @{HOME}/.config/QtProject.conf r, # common settings for QFileDialog, etc (application might need write access)
+  owner @{HOME}/.cache/qt_compose_cache_{little,big}_endian_* r, # for "platforminputcontexts" plugins
+  # End of backported qt5 abstractions
+
   # Backport qt5-compose-cache-write abstraction
   # commit 1250402471d9d83134b0faa90239a733a37f23f0
   owner @{HOME}/.cache/qt_compose_cache_{little,big}_endian_* rwl -> @{HOME}/.cache/#[0-9]*[0-9],