From 79f0848b77dc5b33f381564b987fc88896f15d56 Mon Sep 17 00:00:00 2001
From: valoq <valoq@mailbox.org>
Date: Tue, 9 Sep 2025 22:15:25 +0200
Subject: [PATCH] add poppler tools

---
 apparmor.d/profiles-m-r/pdfattach   | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdfdetach   | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdffonts    | 21 +++++++++++++++++++++
 apparmor.d/profiles-m-r/pdfimages   | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdfinfo     | 21 +++++++++++++++++++++
 apparmor.d/profiles-m-r/pdfseparate | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdfsig      | 23 +++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdftocairo  | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdftohtml   | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdftoppm    | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdftops     | 22 ++++++++++++++++++++++
 apparmor.d/profiles-m-r/pdftotext   |  2 +-
 apparmor.d/profiles-m-r/pdfunite    | 22 ++++++++++++++++++++++
 13 files changed, 264 insertions(+), 1 deletion(-)
 create mode 100644 apparmor.d/profiles-m-r/pdfattach
 create mode 100644 apparmor.d/profiles-m-r/pdfdetach
 create mode 100644 apparmor.d/profiles-m-r/pdffonts
 create mode 100644 apparmor.d/profiles-m-r/pdfimages
 create mode 100644 apparmor.d/profiles-m-r/pdfinfo
 create mode 100644 apparmor.d/profiles-m-r/pdfseparate
 create mode 100644 apparmor.d/profiles-m-r/pdfsig
 create mode 100644 apparmor.d/profiles-m-r/pdftocairo
 create mode 100644 apparmor.d/profiles-m-r/pdftohtml
 create mode 100644 apparmor.d/profiles-m-r/pdftoppm
 create mode 100644 apparmor.d/profiles-m-r/pdftops
 create mode 100644 apparmor.d/profiles-m-r/pdfunite

diff --git a/apparmor.d/profiles-m-r/pdfattach b/apparmor.d/profiles-m-r/pdfattach
new file mode 100644
index 000000000..5a063422e
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdfattach
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdfattach
+profile pdfattach @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdfattach>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdfdetach b/apparmor.d/profiles-m-r/pdfdetach
new file mode 100644
index 000000000..bf6e589cc
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdfdetach
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdfdetach
+profile pdfdetach @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdfdetach>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdffonts b/apparmor.d/profiles-m-r/pdffonts
new file mode 100644
index 000000000..8cc71b246
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdffonts
@@ -0,0 +1,21 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdffonts
+profile pdffonts @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdffonts>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdfimages b/apparmor.d/profiles-m-r/pdfimages
new file mode 100644
index 000000000..0f3a6681b
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdfimages
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdfimages
+profile pdfimages @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdfimages>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdfinfo b/apparmor.d/profiles-m-r/pdfinfo
new file mode 100644
index 000000000..a481ad323
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdfinfo
@@ -0,0 +1,21 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdfinfo
+profile pdfinfo @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdfinfo>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdfseparate b/apparmor.d/profiles-m-r/pdfseparate
new file mode 100644
index 000000000..1026719f8
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdfseparate
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdfseparate
+profile pdfseparate @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdfseparate>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdfsig b/apparmor.d/profiles-m-r/pdfsig
new file mode 100644
index 000000000..5f4cb3ce7
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdfsig
@@ -0,0 +1,23 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdfsig
+profile pdfsig @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/ssl_certs>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdfsig>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdftocairo b/apparmor.d/profiles-m-r/pdftocairo
new file mode 100644
index 000000000..65a880057
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdftocairo
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdftocairo
+profile pdftocairo @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdftocairo>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdftohtml b/apparmor.d/profiles-m-r/pdftohtml
new file mode 100644
index 000000000..3c44be2f5
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdftohtml
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdftohtml
+profile pdftohtml @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdftohtml>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdftoppm b/apparmor.d/profiles-m-r/pdftoppm
new file mode 100644
index 000000000..4924a91d8
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdftoppm
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdftoppm
+profile pdftoppm @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdftoppm>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdftops b/apparmor.d/profiles-m-r/pdftops
new file mode 100644
index 000000000..1a390c576
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdftops
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdftops
+profile pdftops @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdftops>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/pdftotext b/apparmor.d/profiles-m-r/pdftotext
index 0394687f7..7fb2bed7b 100644
--- a/apparmor.d/profiles-m-r/pdftotext
+++ b/apparmor.d/profiles-m-r/pdftotext
@@ -1,5 +1,5 @@
 # apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2024 valoq <valoq@mailbox.org>
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
 # SPDX-License-Identifier: GPL-2.0-only
 
 abi <abi/4.0>,
diff --git a/apparmor.d/profiles-m-r/pdfunite b/apparmor.d/profiles-m-r/pdfunite
new file mode 100644
index 000000000..ea2b776ae
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdfunite
@@ -0,0 +1,22 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdfunite
+profile pdfunite @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read-strict>
+  include <abstractions/user-write-strict>
+  
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdfunite>
+}
+
+# vim:syntax=apparmor