diff --git a/apparmor.d/groups/systemd/systemd-mount b/apparmor.d/groups/systemd/systemd-mount new file mode 100644 index 00000000..9ac10bc7 --- /dev/null +++ b/apparmor.d/groups/systemd/systemd-mount @@ -0,0 +1,25 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/systemd-mount +@{exec_path} += /{usr/,}bin/systemd-umount +profile systemd-mount @{exec_path} { + include + include + + @{exec_path} mr, + + /{usr/,}bin/pager rPx -> child-pager, + /{usr/,}bin/less rPx -> child-pager, + /{usr/,}bin/more rPx -> child-pager, + + @{sys}/bus/ r, + @{sys}/class/ r, + + include if exists +}