diff --git a/apparmor.d/profiles-g-l/gssproxy b/apparmor.d/profiles-g-l/gssproxy new file mode 100644 index 000000000..af96cbd90 --- /dev/null +++ b/apparmor.d/profiles-g-l/gssproxy @@ -0,0 +1,26 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/gssproxy +profile gssproxy @{exec_path} { + include + include + include + + @{exec_path} mr, + + /etc/gssproxy/{,**} r, + + owner /var/lib/gssproxy/{,**} rw, + owner @{run}/gssproxy.pid rw, + owner @{run}/gssproxy.sock rw, + + owner @{PROC}/@{pids}/net/rpc/use-gss-proxy rw, + + include if exists +} \ No newline at end of file