diff --git a/apparmor.d/groups/grub/grub-bios-setup b/apparmor.d/groups/grub/grub-bios-setup new file mode 100644 index 00000000..d6961bf9 --- /dev/null +++ b/apparmor.d/groups/grub/grub-bios-setup @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}{s,}bin/grub-bios-setup +profile grub-bios-setup @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-editenv b/apparmor.d/groups/grub/grub-editenv new file mode 100644 index 00000000..419e46c7 --- /dev/null +++ b/apparmor.d/groups/grub/grub-editenv @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-editenv +profile grub-editenv @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-file b/apparmor.d/groups/grub/grub-file new file mode 100644 index 00000000..9ddea365 --- /dev/null +++ b/apparmor.d/groups/grub/grub-file @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-file +profile grub-file @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-fstest b/apparmor.d/groups/grub/grub-fstest new file mode 100644 index 00000000..6258b4e4 --- /dev/null +++ b/apparmor.d/groups/grub/grub-fstest @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-fstest +profile grub-fstest @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-glue-efi b/apparmor.d/groups/grub/grub-glue-efi new file mode 100644 index 00000000..db59cefc --- /dev/null +++ b/apparmor.d/groups/grub/grub-glue-efi @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-glue-efi +profile grub-glue-efi @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-install b/apparmor.d/groups/grub/grub-install new file mode 100644 index 00000000..152ea426 --- /dev/null +++ b/apparmor.d/groups/grub/grub-install @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}{s,}bin/grub-install +profile grub-install @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-kbdcomp b/apparmor.d/groups/grub/grub-kbdcomp new file mode 100644 index 00000000..2760bd0a --- /dev/null +++ b/apparmor.d/groups/grub/grub-kbdcomp @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-kbdcomp +profile grub-kbdcomp @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-macbless b/apparmor.d/groups/grub/grub-macbless new file mode 100644 index 00000000..24e26923 --- /dev/null +++ b/apparmor.d/groups/grub/grub-macbless @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}{s,}bin/grub-macbless +profile grub-macbless @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-menulst2cfg b/apparmor.d/groups/grub/grub-menulst2cfg new file mode 100644 index 00000000..7a5f063f --- /dev/null +++ b/apparmor.d/groups/grub/grub-menulst2cfg @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-menulst2cfg +profile grub-menulst2cfg @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mkdevicemap b/apparmor.d/groups/grub/grub-mkdevicemap new file mode 100644 index 00000000..835093bf --- /dev/null +++ b/apparmor.d/groups/grub/grub-mkdevicemap @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}{s,}bin/grub-mkdevicemap +profile grub-mkdevicemap @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mkfont b/apparmor.d/groups/grub/grub-mkfont new file mode 100644 index 00000000..fe5d5c4f --- /dev/null +++ b/apparmor.d/groups/grub/grub-mkfont @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mkfont +profile grub-mkfont @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mkimage b/apparmor.d/groups/grub/grub-mkimage new file mode 100644 index 00000000..bd4729cf --- /dev/null +++ b/apparmor.d/groups/grub/grub-mkimage @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mkimage +profile grub-mkimage @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mklayout b/apparmor.d/groups/grub/grub-mklayout new file mode 100644 index 00000000..d01086f5 --- /dev/null +++ b/apparmor.d/groups/grub/grub-mklayout @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mklayout +profile grub-mklayout @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mknetdir b/apparmor.d/groups/grub/grub-mknetdir new file mode 100644 index 00000000..ea85f204 --- /dev/null +++ b/apparmor.d/groups/grub/grub-mknetdir @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mknetdir +profile grub-mknetdir @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mkpasswd-pbkdf2 b/apparmor.d/groups/grub/grub-mkpasswd-pbkdf2 new file mode 100644 index 00000000..33ccfa78 --- /dev/null +++ b/apparmor.d/groups/grub/grub-mkpasswd-pbkdf2 @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mkpasswd-pbkdf2 +profile grub-mkpasswd-pbkdf2 @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mkrescue b/apparmor.d/groups/grub/grub-mkrescue new file mode 100644 index 00000000..252c1df4 --- /dev/null +++ b/apparmor.d/groups/grub/grub-mkrescue @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mkrescue +profile grub-mkrescue @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mkstandalone b/apparmor.d/groups/grub/grub-mkstandalone new file mode 100644 index 00000000..b2be219c --- /dev/null +++ b/apparmor.d/groups/grub/grub-mkstandalone @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mkstandalone +profile grub-mkstandalone @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-mount b/apparmor.d/groups/grub/grub-mount new file mode 100644 index 00000000..6ea7afef --- /dev/null +++ b/apparmor.d/groups/grub/grub-mount @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-mount +profile grub-mount @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-ntldr-img b/apparmor.d/groups/grub/grub-ntldr-img new file mode 100644 index 00000000..766c505d --- /dev/null +++ b/apparmor.d/groups/grub/grub-ntldr-img @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-ntldr-img +profile grub-ntldr-img @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-reboot b/apparmor.d/groups/grub/grub-reboot new file mode 100644 index 00000000..229aea9a --- /dev/null +++ b/apparmor.d/groups/grub/grub-reboot @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}{s,}bin/grub-reboot +profile grub-reboot @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-render-label b/apparmor.d/groups/grub/grub-render-label new file mode 100644 index 00000000..3a0d5034 --- /dev/null +++ b/apparmor.d/groups/grub/grub-render-label @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-render-label +profile grub-render-label @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-set-default b/apparmor.d/groups/grub/grub-set-default new file mode 100644 index 00000000..531beda9 --- /dev/null +++ b/apparmor.d/groups/grub/grub-set-default @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}{s,}bin/grub-set-default +profile grub-set-default @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} + diff --git a/apparmor.d/groups/grub/grub-syslinux2cfg b/apparmor.d/groups/grub/grub-syslinux2cfg new file mode 100644 index 00000000..bbbc94a7 --- /dev/null +++ b/apparmor.d/groups/grub/grub-syslinux2cfg @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Jeroen Rijken +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/grub-syslinux2cfg +profile grub-syslinux2cfg @{exec_path} flags=(complain) { + include + include + + @{exec_path} rm, + + include if exists +} +