diff --git a/apparmor.d/profiles-m-r/passimd b/apparmor.d/profiles-m-r/passimd new file mode 100644 index 00000000..40e4d0ed --- /dev/null +++ b/apparmor.d/profiles-m-r/passimd @@ -0,0 +1,31 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2023 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{lib}/passimd +profile passimd @{exec_path} flags=(attach_disconnected) { + include + include + include + + capability dac_read_search, + + network inet stream, + network inet6 stream, + network netlink raw, + + dbus bind bus=system name=org.freedesktop.Passim, + + @{exec_path} mr, + + /usr/share/dbus-1/interfaces/org.freedesktop.Passim.xml r, + + /var/lib/passim/{,**} r, + /var/lib/passim/data/{,**} rw, + + include if exists +} \ No newline at end of file diff --git a/dists/flags/main.flags b/dists/flags/main.flags index 77130446..5c5f616b 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -217,6 +217,7 @@ nvidia-persistenced complain os-prober attach_disconnected,complain packagekitd attach_disconnected,complain pass-import complain +passimd attach_disconnected,complain pidof complain pinentry complain pinentry-curses complain