diff --git a/apparmor.d/profiles-s-z/speech-dispatcher b/apparmor.d/profiles-s-z/speech-dispatcher new file mode 100644 index 00000000..7a597ed5 --- /dev/null +++ b/apparmor.d/profiles-s-z/speech-dispatcher @@ -0,0 +1,34 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/speech-dispatcher +profile speech-dispatcher @{exec_path} { + include + include + include + include + + network inet stream, + network inet6 stream, + + @{exec_path} mr, + + @{sh_path} ix, + @{lib}/speech-dispatcher/** r, + @{lib}/speech-dispatcher/speech-dispatcher-modules/* ix, + + /etc/machine-id r, + /etc/speech-dispatcher/{,**} r, + + owner @{run}/user/@{uid}/speech-dispatcher/ rw, + owner @{run}/user/@{uid}/speech-dispatcher/** rwk, + + include if exists +} + +# vim:syntax=apparmor diff --git a/dists/flags/main.flags b/dists/flags/main.flags index 40168174..88cb2d17 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -316,6 +316,7 @@ snapd complain snapd-apparmor complain snapd-core-fixup complain snapshot complain +speech-dispatcher complain ssservice complain startplasma complain startx attach_disconnected,complain