# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2026 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only

# KConfig's shared-config lock file, used by any Qt/KDE app touching kdeglobals

  owner @{user_config_dirs}/kdeglobals w,
  owner @{user_config_dirs}/kdeglobals.lock rwk,
  owner @{user_config_dirs}/kdeglobals.@{rand6} rwl -> @{user_config_dirs}/#@{int},

  # KPropertiesDialog "Share" tab (NFS/Samba) queried when browsing $HOME
  network inet dgram,

  /etc/exports r,
  /etc/krb5.conf r,
  /etc/krb5.conf.d/ r,
  /etc/krb5.conf.d/* r,
  /var/lib/sss/pubconf/krb5.include.d/ r,
  /etc/samba/smb.conf r,
  /etc/samba/usershares.conf r,
  owner @{user_config_dirs}/knfsshare r,
  @{bin}/net       rix,
  @{bin}/testparm  rix,

  /var/lib/samba/lock/ r,
  /var/lib/samba/lock/msg.lock/ rw,


  /etc/crypto-policies/back-ends/gnutls.config r,
  /etc/crypto-policies/back-ends/krb5.config r,

# vim:syntax=apparmor
