From fb61f8ebfff7754042124679849a2e3d9b115835 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Tue, 14 Jun 2022 19:07:35 +0100
Subject: [PATCH] feat(profiles): add language-validate.

---
 apparmor.d/groups/freedesktop/accounts-daemon |  2 ++
 apparmor.d/profiles-g-l/language-validate     | 26 +++++++++++++++++++
 2 files changed, 28 insertions(+)
 create mode 100644 apparmor.d/profiles-g-l/language-validate

diff --git a/apparmor.d/groups/freedesktop/accounts-daemon b/apparmor.d/groups/freedesktop/accounts-daemon
index 774169647..8c49c4848 100644
--- a/apparmor.d/groups/freedesktop/accounts-daemon
+++ b/apparmor.d/groups/freedesktop/accounts-daemon
@@ -57,6 +57,8 @@ profile accounts-daemon @{exec_path} flags=(attach_disconnected) {
 
   @{exec_path} mr,
 
+  /usr/share/language-tools/language-validate  rPx,
+
   /usr/share/accountsservice/{,**} r,
   /usr/share/dbus-1/interfaces/*.xml r,
 
diff --git a/apparmor.d/profiles-g-l/language-validate b/apparmor.d/profiles-g-l/language-validate
new file mode 100644
index 000000000..3c878be31
--- /dev/null
+++ b/apparmor.d/profiles-g-l/language-validate
@@ -0,0 +1,26 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = /usr/share/language-tools/language-validate
+profile language-validate @{exec_path} {
+  include <abstractions/base>
+
+  capability setgid,
+
+  @{exec_path} mr,
+
+  /{usr/,}bin/{,ba,da}sh                      rix,
+  /{usr/,}bin/grep                            rix,
+  /{usr/,}bin/locale                          rix,
+  /usr/share/language-tools/language-options  rix,
+
+  /usr/share/locale-langpack/{,*} r,
+  /usr/share/language-tools/{,*} r,
+
+  include if exists <local/language-validate>
+}
\ No newline at end of file