From d5a65ba8319d63faa358abfc55c51e5fd77bc3f3 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Thu, 29 May 2025 23:26:18 +0200
Subject: [PATCH] feat(profile): add a few small profile needed by fsp.

---
 apparmor.d/profiles-a-f/e2scrub               | 18 ++++++++++++++++
 .../open-iscsi-net-interface-handler          | 19 +++++++++++++++++
 apparmor.d/profiles-s-z/u-d-c-print-pci-ids   | 19 +++++++++++++++++
 .../udev-bridge-network-interface             | 21 +++++++++++++++++++
 4 files changed, 77 insertions(+)
 create mode 100644 apparmor.d/profiles-a-f/e2scrub
 create mode 100644 apparmor.d/profiles-m-r/open-iscsi-net-interface-handler
 create mode 100644 apparmor.d/profiles-s-z/u-d-c-print-pci-ids
 create mode 100644 apparmor.d/profiles-s-z/udev-bridge-network-interface

diff --git a/apparmor.d/profiles-a-f/e2scrub b/apparmor.d/profiles-a-f/e2scrub
new file mode 100644
index 000000000..2e7e88487
--- /dev/null
+++ b/apparmor.d/profiles-a-f/e2scrub
@@ -0,0 +1,18 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{sbin}/e2scrub
+profile e2scrub @{exec_path} flags=(complain) {
+  include <abstractions/base>
+
+  @{exec_path} mr,
+
+  include if exists <local/e2scrub>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-m-r/open-iscsi-net-interface-handler b/apparmor.d/profiles-m-r/open-iscsi-net-interface-handler
new file mode 100644
index 000000000..2593b78ac
--- /dev/null
+++ b/apparmor.d/profiles-m-r/open-iscsi-net-interface-handler
@@ -0,0 +1,19 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{lib}/open-iscsi/net-interface-handler
+profile open-iscsi-net-interface-handler @{exec_path} flags=(complain) {
+  include <abstractions/base>
+
+  @{exec_path} mr,
+  @{sh_path} r,
+
+  include if exists <local/open-iscsi-net-interface-handler>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-s-z/u-d-c-print-pci-ids b/apparmor.d/profiles-s-z/u-d-c-print-pci-ids
new file mode 100644
index 000000000..2ae7f66ef
--- /dev/null
+++ b/apparmor.d/profiles-s-z/u-d-c-print-pci-ids
@@ -0,0 +1,19 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{sbin}/u-d-c-print-pci-ids
+profile u-d-c-print-pci-ids @{exec_path} {
+  include <abstractions/base>
+
+  @{exec_path} mr,
+  @{sh_path} r,
+
+  include if exists <local/u-d-c-print-pci-ids>
+}
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/profiles-s-z/udev-bridge-network-interface b/apparmor.d/profiles-s-z/udev-bridge-network-interface
new file mode 100644
index 000000000..7e3ba52f9
--- /dev/null
+++ b/apparmor.d/profiles-s-z/udev-bridge-network-interface
@@ -0,0 +1,21 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/4.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{lib}/udev/bridge-network-interface
+profile udev-bridge-network-interface @{exec_path} {
+  include <abstractions/base>
+
+  @{exec_path} mr,
+  @{sh_path} r,
+
+  /etc/default/bridge-utils r,
+
+  include if exists <local/udev-bridge-network-interface>
+}
+
+# vim:syntax=apparmor