diff --git a/ipfs-contrib b/ipfs-contrib new file mode 100644 index 000000000..7af43359d --- /dev/null +++ b/ipfs-contrib @@ -0,0 +1,26 @@ +abi , + +include + +# vim:syntax=apparmor +# AppArmor policy for ipfs +# Copyright (C) 2023 Andy Ramos +# SPDX-License-Identifier: GPL-3.0-only + +profile ipfs /usr/local/bin/ipfs { + include + include + include + + /dev/tty r, + /etc/mime.types r, + @{PROC}/sys/kernel/hostname r, + @{PROC}/sys/net/core/somaxconn r, + @{run}/systemd/resolve/stub-resolv.conf r, + @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r, + owner /usr/local/bin/ipfs mr, + owner @{HOME}/.ipfs/{,**} rwk, + /srv/repos/{,**} r, + /srv/torrent/{,**} r, + /usr/share/mime/globs2 r, +}