From 5fad77b9f8813d87b97d4b1e8a7d862e2deb13cf Mon Sep 17 00:00:00 2001
From: Vincas Dargis <vindrg@gmail.com>
Date: Sat, 26 Jan 2019 15:08:34 +0200
Subject: [PATCH] fix(apparmor): Fix loading libraries from custom install
 prefix

If qtox is installed in /usr/local prefix (for example), launching qTox
fails because loading libraries from @{qtox_prefix} directory was not
allowed.

Add rule to allow loading libraries from @{qtox_prefix}/lib directory.
---
 security/apparmor/2.12.1/usr.bin.qtox | 5 +++++
 security/apparmor/2.13.2/usr.bin.qtox | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/security/apparmor/2.12.1/usr.bin.qtox b/security/apparmor/2.12.1/usr.bin.qtox
index fb3f55abd..77cbc0b59 100644
--- a/security/apparmor/2.12.1/usr.bin.qtox
+++ b/security/apparmor/2.12.1/usr.bin.qtox
@@ -27,6 +27,11 @@ profile qtox /usr{,/local}/bin/qtox {
   #TODO: use xdg-open abstraction when it's available
   /usr/bin/xdg-open PUx,
 
+  # Additional libraries
+
+  # Allow /usr/local/lib/libtoxcore.so...
+  @{qtox_prefix}/lib/*.so* mr,
+
   # Networking
 
   network tcp,
diff --git a/security/apparmor/2.13.2/usr.bin.qtox b/security/apparmor/2.13.2/usr.bin.qtox
index be2e0208c..7a9373383 100644
--- a/security/apparmor/2.13.2/usr.bin.qtox
+++ b/security/apparmor/2.13.2/usr.bin.qtox
@@ -33,6 +33,11 @@ profile qtox /usr{,/local}/bin/qtox {
   #TODO: use xdg-open abstraction when it's available
   /usr/bin/xdg-open PUx,
 
+  # Additional libraries
+
+  # Allow /usr/local/lib/libtoxcore.so...
+  @{qtox_prefix}/lib/*.so* mr,
+
   # Networking
 
   network tcp,