From 15dcc3192c8c8438ea7831e80be771fb45bb617b Mon Sep 17 00:00:00 2001 From: tpaau-17DB Date: Tue, 1 Jul 2025 18:18:22 +0200 Subject: [PATCH 1/2] Add profile for `tgpt`. --- apparmor.d/profiles-s-z/tgpt | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 apparmor.d/profiles-s-z/tgpt diff --git a/apparmor.d/profiles-s-z/tgpt b/apparmor.d/profiles-s-z/tgpt new file mode 100644 index 000000000..444c29620 --- /dev/null +++ b/apparmor.d/profiles-s-z/tgpt @@ -0,0 +1,21 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2025 tpaau-17DB tpaau-17DB@tutamail.com +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/tgpt +profile tgpt @{exec_path} flags=(unconfined) { + include + include + + @{exec_path} mr, + + owner @{HOME}/@{XDG_DOWNLOAD_DIR}/** rw, + + include if exists +} + +# vim:syntax=apparmor From 71590d3b5fb0839f0eb567091b14f0ceff05ebd7 Mon Sep 17 00:00:00 2001 From: tpaau-17DB <113297655+tpaau-17DB@users.noreply.github.com> Date: Wed, 2 Jul 2025 19:17:37 +0000 Subject: [PATCH 2/2] Swap `unconfined` flag with `complain` --- apparmor.d/profiles-s-z/tgpt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apparmor.d/profiles-s-z/tgpt b/apparmor.d/profiles-s-z/tgpt index 444c29620..7b7763384 100644 --- a/apparmor.d/profiles-s-z/tgpt +++ b/apparmor.d/profiles-s-z/tgpt @@ -7,7 +7,7 @@ abi , include @{exec_path} = @{bin}/tgpt -profile tgpt @{exec_path} flags=(unconfined) { +profile tgpt @{exec_path} flags=(complain) { include include