Add lxqt-panel #594
Add lxqt-panel #594
Conversation
first file for the LXQT 2.0 desktop group
starter file for LXQT Desktop
I use sddm as display manager I cant remove the other file - only use graphical env., sorry After startlxqt i would add 2 lines to sddm to enable the start of LXQT desktop
Enable sddm to start an lxqt desktop session
lxqt-session to be started by startlxqt. Display manager: sddm
is needed for several complaints:
DENIED kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
apparmor.d/groups/lxqt/lxqt-panel
Outdated
| /usr/lib{,32,64}/lxqt-panel/*.so mr, # LXQT-Plugins | ||
| /usr/lib{,32,64}/lxqt-config/*.so mr, # LXQT-Plugins |
There was a problem hiding this comment.
Use @{lib} instead of /usr/lib{,32,64}
| owner @{user_config_dirs}/pulse/{,**} rwk, | ||
| owner @{user_config_dirs}/ibus/bus/{,**} rw, | ||
|
|
||
| @{run}/udev/data/* r, |
There was a problem hiding this comment.
That need to be restricted. Take a look at how it is used in the profiles. You usually only need to copy/paste existing rule from other profiles.
apparmor.d/groups/lxqt/lxqt-panel
Outdated
| owner @{HOME}/.config/menus/*.menu rw, | ||
| owner @{HOME}/.config/menus/applications-merged/ r, | ||
| owner @{HOME}/Desktop/*.desktop rw, | ||
| owner @{HOME}/Desktop/#@{int} rw, | ||
| owner @{HOME}/Desktop/*.desktop l -> @{HOME}/Desktop/#@{int}, | ||
| owner @{HOME}/.local/share/desktop-directories/*.directory r, | ||
| owner @{HOME}/.local/share/gvfs-metadata/{,*} r, |
There was a problem hiding this comment.
You need to use the tunables such as @{user_config_dirs} cf https://apparmor.pujol.io/variables/
apparmor.d/groups/lxqt/lxqt-panel
Outdated
| owner @{HOME}/.local/share/desktop-directories/*.directory r, | ||
| owner @{HOME}/.local/share/gvfs-metadata/{,*} r, | ||
|
|
||
| owner @{user_config_dirs}/lxqt/#* rw, |
There was a problem hiding this comment.
That should be: @{user_config_dirs}/lxqt/#@{int} (same elsewhere)
apparmor.d/groups/lxqt/lxqt-panel
Outdated
| /usr/share/lxqt/helpers/*.desktop r, | ||
| /usr/share/lxqt/panel/plugins/{,*.desktop} r, | ||
| /usr/share/desktop-directories/{,**} r, | ||
| /usr/share/X11/locale/locale.alias r, |
There was a problem hiding this comment.
/usr/share/X11/ is part of the lxqt abstraction.
apparmor.d/groups/lxqt/lxqt-panel
Outdated
| /usr/share/lxqt/helpers/*.desktop r, | ||
| /usr/share/lxqt/panel/plugins/{,*.desktop} r, |
There was a problem hiding this comment.
Simplify as /usr/share/lxqt/{,**}
|
There is an issue between:
Both See: https://apparmor.pujol.io/development/internal/#open-resources for more. |
|
what crashed the first test? |
|
ok, the new altered version is working without complaints in Arch linux |
add child-open
you think its too permissive to have app-launcher-user here, right?
add needed programs
turning back to layout of corresponding xfce file.
|
Thanks, it looks good now. Merged! |
Panel for lxqt desktop group