diff --git a/apparmor.d/profiles-m-r/mpd b/apparmor.d/profiles-m-r/mpd new file mode 100644 index 000000000..c15bdaa5b --- /dev/null +++ b/apparmor.d/profiles-m-r/mpd @@ -0,0 +1,49 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2017-2021 Mikhail Morfikov +# Copyright (C) 2023 Alexandre Pujol +# Copyright (C) 2023 Jose Maldonado +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/mpd +profile mpd @{exec_path} { + include + include + include + + network inet dgram, + network inet6 dgram, + network inet stream, + network inet6 stream, + network netlink raw, + + signal (receive) set=(term, kill), + + @{exec_path} mr, + + @{bin}/pulseuadio rPx, + + /etc/mpd/* r, + + /etc/machine-id r, + /var/lib/dbus/machine-id r, + + owner @{HOME}/ r, + owner @{user_music_dirs}/{,**} rw, + + owner @{user_config_dirs}/mpd/ rw, + owner @{user_config_dirs}/mpd/* rwkl, + owner @{user_config_dirs}/mpd/playlists/ rw, + owner @{user_config_dirs}/mpd/playlists/* rw, + + owner @{run}/mpd/ rw, + owner @{run}/mpd/* rw, + + owner @{PROC}/@{pid}/cmdline r, + owner @{PROC}/@{pid}/task/ r, + + include if exists +}