Attempt to fix mako issue with apparmour profile

See emersion/mako#257
wjdp · Mar 9, 2023 · 24d0b76 · 24d0b76
1 parent 8e8803f
commit 24d0b76
Show file tree

Hide file tree

Showing 4 changed files with 35 additions and 0 deletions.
diff --git a/roles/sway/files/mako-apparmor-fix b/roles/sway/files/mako-apparmor-fix
@@ -0,0 +1,17 @@
+  owner /run/user/[0-9]*/bus rw,
+  dbus send
+       bus=session
+       path=/org/freedesktop/DBus
+       interface=org.freedesktop.DBus
+       member={Hello,RequestName}
+       peer=(name=org.freedesktop.DBus),
+  dbus (send)
+       bus=session
+       path=/org/freedesktop/Notifications
+       interface=org.freedesktop.Notifications
+       member=NotificationClosed,
+  dbus (receive)
+       bus=session
+       path=/org/freedesktop/Notifications
+       interface=org.freedesktop.Notifications
+       member={Notify,NotificationClosed,GetServerInformation,GetCapabilities,CloseNotification},
diff --git a/roles/sway/handlers/main.yml b/roles/sway/handlers/main.yml
@@ -1,3 +1,9 @@
 - name: Reload udev
   command: udevadm control --reload-rules
   become: yes
+
+- name: Reload apparmor
+  become: yes
+  service:
+    name: apparmor
+    state: reloaded
diff --git a/roles/sway/tasks/main.yml b/roles/sway/tasks/main.yml
@@ -89,3 +89,6 @@
     src: "outputs.j2"
     dest: "{{ dotfiles_user_home }}/.config/sway/config.d/05-outputs"
     mode: 0664
+
+- name: Include mako apparmor fix
+  include_tasks: mako-apparmor-fix.yml
diff --git a/roles/sway/tasks/mako-apparmor-fix.yml b/roles/sway/tasks/mako-apparmor-fix.yml
@@ -0,0 +1,9 @@
+- name: Copy mako apparmor profile
+  become: yes
+  copy:
+    src: "{{ dotfiles_home }}/roles/sway/files/mako-apparmor-fix"
+    dest: /etc/apparmor.d/local/fr.emersion.Mako
+    owner: root
+    group: root
+    mode: 0644
+  notify: Reload apparmor