# Copyright (C) 2024 Scarlett Moore
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
# AppArmor policy for marble

abi <abi/4.0>,
include <tunables/global>

profile marble /usr/bin/marble {
#  include <abstractions/kde>
  include <abstractions/kde-globals-write>
  include <abstractions/kde-icon-cache-write>
  include <abstractions/kde-language-write>
#  include <abstractions/kde-open>
  include <abstractions/qt6>
  include <abstractions/qt6-compose-cache-write>
  include <abstractions/qt6-settings-write>
  include <abstractions/dbus-session>

  capability,
  userns,
  network,
  dbus,
  mount,
  umount,
  remount,
  signal,
  mqueue,
  unix,
  ptrace,

  /usr/lib/qt6/libexec/QtWebEngineProcess
  /** pux,
  /{,**} mrwlk,

  profile QtWebEngineProcess {
    capability,
    userns,
    network,
    dbus,
    mount,
    umount,
    remount,
    signal,
    mqueue,
    unix,
    ptrace,
    /** pux,
    /{,**} mrwlk,
  }

  # Site-specific additions and overrides.  See local/README for details.
  include if exists <local/marble>
}
