apparmor.d/apparmor.d/groups/gpg/keyboxd
Alexandre Pujol 66455a9251
feat(profile): improve support for some profiles.
Most of the rules have come from the integration tests.
2024-11-12 22:18:11 +00:00

26 lines
616 B
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{lib}/gnupg/keyboxd
profile keyboxd @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
@{exec_path} mr,
owner @{HOME}/@{XDG_GPG_DIR}/ w,
owner @{HOME}/@{XDG_GPG_DIR}/common.conf r,
owner @{HOME}/@{XDG_GPG_DIR}/public-keys.d/ rw,
owner @{HOME}/@{XDG_GPG_DIR}/public-keys.d/* rwlk,
owner @{PROC}/@{pid}/fd/ r,
include if exists <local/keyboxd>
}
# vim:syntax=apparmor