mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-18 00:48:10 +01:00
feat(profile): apply profile guideline on sing-box.
This commit is contained in:
parent
e7dc2fbf06
commit
8f825473c6
2 changed files with 11 additions and 6 deletions
|
@ -1,4 +1,5 @@
|
||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
|
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
# https://github.com/SagerNet/sing-box
|
# https://github.com/SagerNet/sing-box
|
||||||
|
@ -20,14 +21,17 @@ profile sing-box @{exec_path} {
|
||||||
network inet dgram,
|
network inet dgram,
|
||||||
network inet6 dgram,
|
network inet6 dgram,
|
||||||
|
|
||||||
/proc/meminfo r,
|
@{exec_path} mr,
|
||||||
/sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
|
|
||||||
|
|
||||||
@{bin}/tor mrix,
|
@{bin}/tor mrix,
|
||||||
@{bin}/sing-box mr,
|
|
||||||
/usr/{,local/}share/sing-box/geoip.db r,
|
|
||||||
/usr/{,local/}share/sing-box/geosite.db r,
|
|
||||||
|
|
||||||
owner /{,usr/local/}etc/sing-box/config.json r,
|
/usr/share/sing-box/* r,
|
||||||
|
|
||||||
|
@{etc_ro}/sing-box/config.json r,
|
||||||
|
|
||||||
owner @{user_share_dirs}/certmagic/** rw,
|
owner @{user_share_dirs}/certmagic/** rw,
|
||||||
|
|
||||||
|
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
|
||||||
|
|
||||||
|
include if exists <local/sing-box>
|
||||||
}
|
}
|
||||||
|
|
|
@ -292,6 +292,7 @@ s3fs complain
|
||||||
sdcv complain
|
sdcv complain
|
||||||
sddm attach_disconnected,mediate_deleted,complain
|
sddm attach_disconnected,mediate_deleted,complain
|
||||||
sftp-server complain
|
sftp-server complain
|
||||||
|
sing-box complain
|
||||||
slirp4netns attach_disconnected,complain
|
slirp4netns attach_disconnected,complain
|
||||||
snap complain
|
snap complain
|
||||||
snap-bootstrap complain
|
snap-bootstrap complain
|
||||||
|
|
Loading…
Reference in a new issue