chore: reorganise the freedesktop group.

apparmor.d/profiles-m-r/obexfs

@@ -0,0 +1,53 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2021 Mikhail Morfikov
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = /{usr/,}bin/obexfs
+profile obexfs @{exec_path} {
+  include <abstractions/base>
+
+  network bluetooth raw,
+  network bluetooth seqpacket,
+  network bluetooth stream,
+
+  @{exec_path} mr,
+
+  /{usr/,}bin/fusermount{,3} rCx -> fusermount,
+
+  owner @{HOME}/*/ r,
+  owner @{HOME}/*/*/ r,
+
+  mount fstype=fuse.obexfs -> @{HOME}/*/,
+  mount fstype=fuse.obexfs -> @{HOME}/*/*/,
+
+  /dev/fuse rw,
+
+
+  profile fusermount {
+    include <abstractions/base>
+    include <abstractions/nameservice-strict>
+
+    # To mount anything:
+    capability sys_admin,
+
+    network bluetooth stream,
+
+    /{usr/,}bin/fusermount{,3} mr,
+
+    /etc/fuse.conf r,
+
+    /dev/fuse rw,
+
+    mount fstype={fuse,fuse.obexfs} -> @{HOME}/*/,
+    mount fstype={fuse,fuse.obexfs} -> @{HOME}/*/*/,
+
+    @{PROC}/@{pid}/mounts r,
+
+  }
+
+  include if exists <local/obexfs>
+}