From a8ab6da6f38f659d338c2eb6dee812d45b8cc41b Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 25 May 2025 23:53:40 +0200
Subject: [PATCH] feat(profile): add runit-helper.

---
 apparmor.d/profiles-m-r/runit-helper | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 apparmor.d/profiles-m-r/runit-helper

diff --git a/apparmor.d/profiles-m-r/runit-helper b/apparmor.d/profiles-m-r/runit-helper
new file mode 100644
index 000000000..94b3816c9
--- /dev/null
+++ b/apparmor.d/profiles-m-r/runit-helper
@@ -0,0 +1,23 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{lib}/runit-helper/runit-helper
+profile runit-helper @{exec_path} {
+  include <abstractions/base>
+
+  @{exec_path} mr,
+
+  @{bin}/mkdir rix,
+
+  @{run}/runit/ rw,
+  @{run}/runit/supervise/ w,
+
+  include if exists <local/runit-helper>
+}
+
+# vim:syntax=apparmor