diff --git a/apparmor.d/groups/systemd/systemd-notify b/apparmor.d/groups/systemd/systemd-notify new file mode 100644 index 00000000..4dd8ca11 --- /dev/null +++ b/apparmor.d/groups/systemd/systemd-notify @@ -0,0 +1,19 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/systemd-notify +profile systemd-notify @{exec_path} { + include + + capability sys_admin, + capability net_admin, + + @{exec_path} mr, + + include if exists +}