diff --git a/apparmor.d/groups/freedesktop/plymouth b/apparmor.d/groups/freedesktop/plymouth new file mode 100644 index 000000000..674732276 --- /dev/null +++ b/apparmor.d/groups/freedesktop/plymouth @@ -0,0 +1,20 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/plymouth +profile plymouth @{exec_path} { + include + + unix (send, receive, connect) type=stream peer=(addr="@/org/freedesktop/plymouthd"), + + @{exec_path} mr, + + @{PROC}/cmdline r, + + include if exists +} \ No newline at end of file diff --git a/apparmor.d/groups/freedesktop/plymouth-set-default-theme b/apparmor.d/groups/freedesktop/plymouth-set-default-theme new file mode 100644 index 000000000..17c2a2b84 --- /dev/null +++ b/apparmor.d/groups/freedesktop/plymouth-set-default-theme @@ -0,0 +1,20 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/plymouth-set-default-theme +profile plymouth-set-default-theme @{exec_path} { + include + + @{exec_path} mr, + + /{usr/,}bin/gawk rix, + /{usr/,}bin/grep rix, + /{usr/,}bin/plymouth rPx, + + include if exists +} \ No newline at end of file