diff --git a/apparmor.d/profiles-m-z/usbguard-notifier b/apparmor.d/profiles-m-z/usbguard-notifier new file mode 100644 index 000000000..2df2494df --- /dev/null +++ b/apparmor.d/profiles-m-z/usbguard-notifier @@ -0,0 +1,22 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}{s,}bin/usbguard-notifier +profile usbguard-notifier @{exec_path} { + include + include + + @{exec_path} mr, + + /dev/shm/qb-usbguard-{request,response,event}-[0-9]*-[0-9]*-[0-9]*-{header,data} rw, + /dev/shm/qb-[0-9]*-[0-9]*-[0-9]*-*/qb-{request,response,event}-usbguard-{header,data} rw, + + owner @{PROC}/@{pid}/loginuid r, + + include if exists +} diff --git a/profiles.manifest b/profiles.manifest index 6dab7d802..13689d7d7 100644 --- a/profiles.manifest +++ b/profiles.manifest @@ -231,6 +231,7 @@ usb-devices usbguard usbguard-daemon usbguard-dbus +usbguard-notifier useradd userdel usermod