35 lines
796 B
Text
35 lines
796 B
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2020-2021 Mikhail Morfikov
|
|
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
abi <abi/4.0>,
|
|
|
|
include <tunables/global>
|
|
|
|
@{exec_path} = @{bin}/dpkg-checkbuilddeps
|
|
profile dpkg-checkbuilddeps @{exec_path} flags=(complain) {
|
|
include <abstractions/base>
|
|
include <abstractions/apt>
|
|
include <abstractions/perl>
|
|
|
|
@{exec_path} r,
|
|
|
|
@{bin}/dpkg rPx,
|
|
@{bin}/@{multiarch}gcc-@{int} mrix,
|
|
|
|
/usr/share/dpkg/ostable r,
|
|
/usr/share/dpkg/cputable r,
|
|
/usr/share/dpkg/tupletable r,
|
|
|
|
/etc/dpkg/origins/* r,
|
|
|
|
/var/lib/dpkg/status r,
|
|
|
|
# For package building
|
|
owner @{user_build_dirs}/**/debian/control r,
|
|
|
|
include if exists <local/dpkg-checkbuilddeps>
|
|
}
|
|
|
|
# vim:syntax=apparmor
|