From e4124aec6a2fca1d58823a4f95a2044d7cb7ef41 Mon Sep 17 00:00:00 2001
From: Cameron Nemo <cnemo@tutanota.com>
Date: Mon, 7 Sep 2020 07:56:34 -0700
Subject: [PATCH] apparmor: update pulseaudio profile

The pulseaudio profile was referring to the gconf helper, which has been
replaced with the gsettings-helper.
---
 .../files/profiles/usr.bin.pulseaudio         | 20 ++++++++++++-------
 srcpkgs/apparmor/template                     |  2 +-
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/srcpkgs/apparmor/files/profiles/usr.bin.pulseaudio b/srcpkgs/apparmor/files/profiles/usr.bin.pulseaudio
index e23c5bf0043..4b17e6edc08 100644
--- a/srcpkgs/apparmor/files/profiles/usr.bin.pulseaudio
+++ b/srcpkgs/apparmor/files/profiles/usr.bin.pulseaudio
@@ -1,6 +1,6 @@
 #include <tunables/global>
 
-/usr/bin/pulseaudio {
+profile pulseaudio /usr/bin/pulseaudio {
   #include <abstractions/base>
   #include <abstractions/audio>
   #include <abstractions/dbus-session>
@@ -23,6 +23,7 @@
 
   unix (connect, receive, send) type=stream peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
   ptrace (read,trace) peer=@{profile_name},
+  signal (send) peer=pulseaudio//pulse-gsettings-helper,
 
   /usr/bin/pulseaudio mixr,
 
@@ -70,7 +71,7 @@
   /usr/share/applications/* r,
   /usr/share/pulseaudio/** r,
   /usr/lib/pulse-[1-9]*.[0-9]/modules/*.so mr,
-  /usr/lib/pulseaudio/pulse/gconf-helper Cx,
+  /usr/libexec/pulse/gsettings-helper Cx,
 
   owner /var/lib/gdm3/.config/pulse/ rw,
   owner /var/lib/gdm3/.config/pulse/* rw,
@@ -89,8 +90,7 @@
   /var/lib/pulse/*.tdb rw,
 
   owner @{PROC}/@{pid}/fd/ r,
-  owner @{PROC}/@{pid}/maps r,
-  owner @{PROC}/@{pid}/stat r,
+  owner @{PROC}/@{pid}/{maps,mountinfo,stat} r,
 
   owner /tmp/pulse-*/pid rwk,
   owner /tmp/pulse-*/native rwk,
@@ -105,10 +105,16 @@
   owner /tmp/.esd-@{pid}*/ rw,
   owner /tmp/.esd-@{pid}*/socket rw,
 
-  profile /usr/lib/pulseaudio/pulse/gconf-helper {
+  profile pulse-gsettings-helper /usr/libexec/pulse/gsettings-helper {
     #include <abstractions/base>
-
-    /usr/lib/pulseaudio/pulse/gconf-helper mr,
+    #include <abstractions/gnome>
+    #include <abstractions/dconf>
+
+    /usr/libexec/pulse/gsettings-helper mr,
+    owner /{,var/}run/user/*/dconf/user rw,
+    owner @{HOME}/.config/dconf/user rw,
+    owner @{PROC}/@{pid}/fd/ r,
+    signal (receive) peer=pulseaudio,
   }
 
   # Site-specific additions and overrides. See local/README for details.
diff --git a/srcpkgs/apparmor/template b/srcpkgs/apparmor/template
index aec653c100c..886ef5b587c 100644
--- a/srcpkgs/apparmor/template
+++ b/srcpkgs/apparmor/template
@@ -1,7 +1,7 @@
 # Template file for 'apparmor'
 pkgname=apparmor
 version=2.13.4
-revision=4
+revision=5
 wrksrc="${pkgname}-v${version}"
 build_wrksrc=libraries/libapparmor
 build_style=gnu-configure