diff --git a/apparmor.d/groups/freedesktop/iio-sensor-proxy b/apparmor.d/groups/freedesktop/iio-sensor-proxy new file mode 100644 index 000000000..0840a0d6c --- /dev/null +++ b/apparmor.d/groups/freedesktop/iio-sensor-proxy @@ -0,0 +1,33 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2023 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{lib}/iio-sensor-proxy +profile iio-sensor-proxy @{exec_path} { + include + + network netlink raw, + + @{exec_path} mr, + + @{run}/udev/data/+platform* r, + @{run}/udev/data/+input* r, + @{run}/udev/data/c13:[0-9]* r, # For /dev/input/* + @{run}/udev/data/c3[0-9]*:[0-9]* r, # For dynamic assignment range 384 to 511 + @{run}/udev/data/c4[0-9]*:[0-9]* r, + @{run}/udev/data/c5[0-9]*:[0-9]* r, + + @{sys}/bus/ r, + @{sys}/bus/iio/devices/ r, + @{sys}/class/ r, + @{sys}/devices/**/uevent r, + @{sys}/devices/pci[0-9]*/**/iio:*/** rw, + + /dev/iio:* r, + + include if exists +} \ No newline at end of file diff --git a/dists/flags/main.flags b/dists/flags/main.flags index d753505d2..88c313b99 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -163,6 +163,7 @@ gvfsd-dav complain hostnamectl complain ibus-engine-table complain ibus-memconf complain +iio-sensor-proxy complain im-launch complain install-info complain irqbalance complain