CMXSL.org/package-helpers-cmxsl
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

apparmor-profiles-extra: fix pidgin apparmor profile not being able to access ibus socket

Browse source
This commit is contained in:
Luis Guzman 2025-10-28 23:43:55 +00:00
parent d489ed9527
commit e1d8eb655e
4 changed files with 23 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

37
helpers/DATA/apparmor-profiles-extra/patch_changes/000-70aed868a4ed76d74eecf3b210ce7bf3098ffab4.patch Normal file
View file

@ -0,0 +1,37 @@
From 70aed868a4ed76d74eecf3b210ce7bf3098ffab4 Mon Sep 17 00:00:00 2001
From: Jacob K <jacobk@disroot.org>
Date: Wed, 12 Feb 2025 12:19:24 -0600
Subject: [PATCH] Add some lines from Atril's profile to fix the screen reader
---
profiles/usr.bin.pidgin | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/profiles/usr.bin.pidgin b/profiles/usr.bin.pidgin
index 5e18702..085301c 100644
--- a/profiles/usr.bin.pidgin
+++ b/profiles/usr.bin.pidgin
@@ -8,6 +8,7 @@
#include <abstractions/bash>
#include <abstractions/dbus-session>
#include <abstractions/dbus-strict>
+ #include <abstractions/dbus-accessibility>
#include <abstractions/dconf>
#include <abstractions/enchant>
#include <abstractions/gnome>
@@ -82,6 +83,13 @@
owner @{PROC}/@{pid}/auxv r,
owner @{PROC}/@{pid}/fd/ r,
+ # These lines were copied from Atril's profile to make the screen reader functional
+ owner /{,var/}run/user/*/at-spi2-*/ rw,
+ owner /{,var/}run/user/*/at-spi2-*/** rw,
+ # Allow access to the non-abstract D-Bus socket used by at-spi > 2.42.0
+ # https://gitlab.gnome.org/GNOME/at-spi2-core/-/issues/43
+ owner /{,var/}run/user/*/at-spi/bus* rw,
+
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.bin.pidgin>
}
--
2.25.1

15
helpers/DATA/apparmor-profiles-extra/patch_changes/001_enable-restricted-dbus-update.patch Normal file
View file

@ -0,0 +1,15 @@
Enable restricted dbus configuration usage by pidgin to fix MATE on Noble (Ecne) orca access.
diff --git a/profiles/usr.bin.pidgin b/profiles/usr.bin.pidgin
index 085301c6..78338084 100644
--- a/profiles/usr.bin.pidgin
+++ b/profiles/usr.bin.pidgin
@@ -49,7 +49,7 @@
# Uncomment the two following lines if you want to allow Pidgin to update
# any DConf setting:
# owner @{HOME}/.{cache,config}/dconf/user rw,
- # owner /{,var/}run/user/[0-9]*/dconf/user rwk,
+ owner /{,var/}run/user/[0-9]*/dconf/user rwk,
/{usr/,}bin/dash rix,
/{usr/,}bin/which rix,

15
helpers/DATA/apparmor-profiles-extra/patch_changes/002-add_allow_pidgin_ibus_socket_access.patch Normal file
View file

@ -0,0 +1,15 @@
diff --git a/profiles/usr.bin.pidgin b/profiles/usr.bin.pidgin
index 78338084..6d18657d 100644
--- a/profiles/usr.bin.pidgin
+++ b/profiles/usr.bin.pidgin
@@ -90,6 +90,10 @@
# https://gitlab.gnome.org/GNOME/at-spi2-core/-/issues/43
owner /{,var/}run/user/*/at-spi/bus* rw,
+ # Allow IBus private socket under HOME cache (used by some IBus setups)
+ owner @{HOME}/.cache/ibus/ r,
+ owner @{HOME}/.cache/ibus/* rw,
+
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.bin.pidgin>
}