Move rules to run fcitx and mozc-server into the lightdm-guest-session

[sojka/lightdm.git] / data / apparmor / lightdm-guest-session.in

diff --git a/data/apparmor/lightdm-guest-session.in b/data/apparmor/lightdm-guest-session.in
index d1312ee4106029f4811b74ccbcd10d180eba6fb1..76c24c471a11c57804ca6c353217438fa8cf8428 100644 (file)
--- a/data/apparmor/lightdm-guest-session.in
+++ b/data/apparmor/lightdm-guest-session.in
@@ -11,8 +11,14 @@
   #include <abstractions/lightdm_chromium-browser>
 
   # fcitx and friends needs special treatment due to C/S design
-  #include <abstractions/fcitx>
+  /usr/bin/fcitx ix,
+  /tmp/fcitx-socket-* rwl,
+  /dev/shm/* rwl,
+  /usr/bin/fcitx-qimpanel ix,
+  /usr/bin/sogou-qimpanel-watchdog ix,
+  /usr/bin/sogou-sys-notify ix,
+  /tmp/sogou-qimpanel:* rwl,
 
   # mozc_server needs special treatment due to C/S design
-  #include <abstractions/mozc_server>
+  unix (bind, listen) type=stream addr="@tmp/.mozc.*",
 }