diff --git a/apparmor.d/profiles-a-f/fd b/apparmor.d/profiles-a-f/fd new file mode 100644 index 000000000..da281c82d --- /dev/null +++ b/apparmor.d/profiles-a-f/fd @@ -0,0 +1,21 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2025 valoq +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/fd +profile fd @{exec_path} { + include + + ## Allow reading the entire filesystem to search for filenames + /{,**} r, + + @{exec_path} mr, + + include if exists +} + +# vim:syntax=apparmor diff --git a/apparmor.d/profiles-m-r/rg b/apparmor.d/profiles-m-r/rg new file mode 100644 index 000000000..d2638c904 --- /dev/null +++ b/apparmor.d/profiles-m-r/rg @@ -0,0 +1,21 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2025 valoq +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/rg +profile rg @{exec_path} { + include + + ## Allow reading the entire filesystem to search for strings + /{,**} r, + + @{exec_path} mr, + + include if exists +} + +# vim:syntax=apparmor