[apparmor] [Merge] lp:~intrigeri/apparmor/flatpak-exports into lp:apparmor

[Simon McVittie]

> +  /{usr,usr/local,var/lib/flatpak/exports}/share/applications/{*/,}               r,

I'm not sure this actually works. Have you tested it against a real Flatpak installation?

% ls -l ~/.local/share/flatpak/exports/share/applications 
total 12
-rw-r--r-- ... mimeinfo.cache
lrwxrwxrwx ... org.debian.packages.openarena.desktop -> ../../../app/org.debian.packages.openarena/current/active/export/share/applications/org.debian.packages.openarena.desktop
lrwxrwxrwx ... org.gnome.PortalTest.desktop -> ../../../app/org.gnome.PortalTest/current/active/export/share/applications/org.gnome.PortalTest.desktop

% echo ~/.local/share/flatpak/exports/share/applications/* | xargs realpath
/home/smcv/.local/share/flatpak/exports/share/applications/mimeinfo.cache
/home/smcv/.local/share/flatpak/app/org.debian.packages.openarena/x86_64/master/250c091b6c9b2710c5804eee7f9ce923502cc04709f4cdbbc4e22cc522c9ab0f/export/share/applications/org.debian.packages.openarena.desktop
/home/smcv/.local/share/flatpak/app/org.gnome.PortalTest/x86_64/master/e12fd48e6eea5033481e7577ee2ea46d43a8a4bf9c67394631ab23fa287c18a7/export/share/applications/org.gnome.PortalTest.desktop

Other exports work similarly.

So I think this actually needs something like

{usr,usr/local,var/lib/flatpak/exports,var/lib/flatpak/{app,runtime}/*/*/*/*/export}/share/applications etc.

and

.local/share/{,flatpak/exports/share/,flatpak/{app,runtime}/*/*/*/*/export/}applications etc.

where the */*/*/* matches NAME/ARCH/BRANCH/COMMIT.
-- 
https://code.launchpad.net/~intrigeri/apparmor/flatpak-exports/+merge/331056
Your team AppArmor Developers is requested to review the proposed merge of lp:~intrigeri/apparmor/flatpak-exports into lp:apparmor.