From af0c87f7126220e5895d41f2e5140b250ca47a6f Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 3 Mar 2024 12:03:16 +0000
Subject: [PATCH] feat(abs): add the initial version of the systemctl
 abstraction.

---
 apparmor.d/abstractions/systemctl | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 apparmor.d/abstractions/systemctl

diff --git a/apparmor.d/abstractions/systemctl b/apparmor.d/abstractions/systemctl
new file mode 100644
index 000000000..2fb161d79
--- /dev/null
+++ b/apparmor.d/abstractions/systemctl
@@ -0,0 +1,18 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+  include <abstractions/consoles>
+
+  ptrace (read) peer=@{systemd},
+
+  unix (bind) type=stream addr=@@{hex}/bus/systemctl/,
+
+  @{bin}/systemctl mr,
+
+  owner @{run}/systemd/private rw,
+
+  @{PROC}/cmdline r,
+  @{PROC}/sys/kernel/osrelease r,
+
+  include if exists <abstractions/systemctl.d>