felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add profiles for cmus and ouch

Browse source
This commit is contained in:
valoq 2024-07-11 11:37:04 +02:00
parent 1db2c01117
commit c56f004a21
No known key found for this signature in database
GPG key ID: 19F09A0FB865CBD8
2 changed files with 55 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

30
apparmor.d/profiles-a-f/cmus Normal file
View file

@ -0,0 +1,30 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/cmus
profile cmus @{exec_path} {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/user-read-strict>
@{exec_path} mr,
/usr/share/cmus/{,**} r,
/usr/share/terminfo/{,**} r,
/etc/machine-id r,
owner @{user_config_dirs}/ r,
owner @{user_config_dirs}/cmus/{,**} rw,
owner @{run}/user/@{uid}/cmus-socket w,
/dev/shm/ r,
include if exists <local/cmus>
}

25
apparmor.d/profiles-m-r/ouch Normal file
View file

@ -0,0 +1,25 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/ouch
profile ouch @{exec_path} {
include <abstractions/base>
include <abstractions/user-write-strict>
@{exec_path} mr,
owner @{HOME}/.tmp@{rand6}/{,**} rw,
@{sys}/fs/cgroup/user.slice/cpu.max r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/cpu.max r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/session-@{int}.scope/cpu.max r,
owner @{PROC}/@{pid}/cgroup r,
include if exists <local/ouch>
}