apparmor profile for 0ad

usr.games.pyrogenesis

#include <tunables/global>

/usr/games/pyrogenesis {
  #include <abstractions/audio>
  #include <abstractions/base>
  #include <abstractions/dbus-session-strict>
  #include <abstractions/freedesktop.org>
  #include <abstractions/nameservice>
  #include <abstractions/nvidia>
  #include <abstractions/wayland>
  #include <abstractions/X>

  network inet,
  network inet6,

  /usr/bin/xdg-open rPUx, # to open web links from within the game
  /usr/bin/xmessage rPUx, # to show crash messages
  /usr/games/pyrogenesis mr,
  /usr/share/games/0ad/** r,

  owner @{HOME}/.cache/0ad/ rw,
  owner @{HOME}/.cache/0ad/** rw,
  owner @{HOME}/.config/0ad/ rw,
  owner @{HOME}/.config/0ad/** rw,
  owner @{HOME}/.local/share/0ad/ rw,
  owner @{HOME}/.local/share/0ad/** rw,

  owner @{HOME}/.cache/mesa/** rw,
  owner @{HOME}/.cache/mesa_shader_cache/** rwk,
  /dev/dri/ r,
  /sys/devices/pci[0-9:]*/**/{device,revision,subsystem_device,subsystem_vendor,uevent,vendor} r,
  @{PROC}/@{pid}/stat r,
  @{PROC}/@{pid}/task/@{pid}/{comm,stat} rw,
  /usr/share/vulkan/** r,

# Everything below is to make atlas working.
# Only enable if you're aware of the consequences!
#  #include <abstractions/gnome>                                                                                                                             
#  owner /dev/shm/* rwl,
#  /etc/fstab r,                                                                                                                                             
#  owner @{HOME} r,                                                                                                                                          
#  owner @{HOME}/** r,                                                                                                                                       
#  owner @{PROC}/@{pid}/mountinfo r,                                                                                                                         
}