diff --git a/apparmor.d/profiles-a-f/losetup b/apparmor.d/profiles-a-f/losetup new file mode 100644 index 00000000..41a5958e --- /dev/null +++ b/apparmor.d/profiles-a-f/losetup @@ -0,0 +1,26 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/losetup +profile losetup @{exec_path} { + include + + capability dac_override, + capability dac_read_search, + + unix (receive) type=stream, + + @{exec_path} mr, + + @{sys}/devices/system/cpu/possible r, + + /dev/loop-control rw, + /dev/loop[0-9]* rw, + + include if exists +} \ No newline at end of file