diff --git a/apparmor.d/profiles-a-f/aa-log b/apparmor.d/profiles-a-f/aa-log new file mode 100644 index 00000000..db930d7c --- /dev/null +++ b/apparmor.d/profiles-a-f/aa-log @@ -0,0 +1,28 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/aa-log +profile aa-log @{exec_path} { + include + + @{exec_path} mr, + + /{usr/,}bin/{,ba,da}sh rix, + /{usr/,}bin/awk rix, + /{usr/,}bin/gawk rix, + /{usr/,}bin/grep rix, + /{usr/,}bin/sed rix, + + /usr/share/terminfo/x/xterm-256color r, + + /var/log/audit/audit.log r, + + /dev/tty rw, + + include if exists +} \ No newline at end of file