From 472d002a96e60dc96d491ebb76e66e7c37cfd6b8 Mon Sep 17 00:00:00 2001
From: Alex Murray <alex.murray@canonical.com>
Date: Thu, 12 Dec 2024 13:05:06 +1030
Subject: [PATCH] profiles/apparmor.d/rygel: allow liborc bits for mx-extract
 child

mx-extract also uses these parts of gstreamer so allow it as well as for the
main rygel profile.

Signed-off-by: Alex Murray <alex.murray@canonical.com>
---
 profiles/apparmor.d/rygel | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/profiles/apparmor.d/rygel b/profiles/apparmor.d/rygel
index bc62aa089..2024626bf 100644
--- a/profiles/apparmor.d/rygel
+++ b/profiles/apparmor.d/rygel
@@ -123,6 +123,11 @@ profile rygel /usr/bin/rygel {
 
     # media files - see tunables/rygel
     owner file r  @{rygel_media_dirs}/{,**},
+
+    # liborc temporary files from gstreamer Orc Integration
+    owner file mrw @{HOME}/orcexec.*,
+    owner file mrw @{run}/user/*/orcexec.*,
+    owner file mrw /tmp/orcexec.*,
   }
 
   # Site-specific additions and overrides. See local/README for details.