Xwayland accesses `/dev/shm/wlroots`

[beroal]

When I run an X11 application, xeyes, under Sway, I get the following log messages.

apparmor="DENIED" operation="file_inherit" class="file" profile="xeyes" name="/dev/pts/1"  comm="xeyes" requested_mask="wr" denied_mask="wr" fsuid=1001 ouid=1001 FSUID="user" OUID="user"
apparmor="DENIED" operation="file_receive" class="file" profile="xwayland" name="/dev/shm/wlroots-BgdaCM"  comm="Xwayland" requested_mask="r" denied_mask="r" fsuid=1001 ouid=1001 FSUID="user" OUID="user"

and the application complains

Error: Can't open display: :0

After I added

/dev/shm/wlroots-* r,

no log messages.

[roddhjav]

It seems that xwayland needs the wayland abstraction, it also probably clean up the profile a bit.