From b36a980461b64898be980d8d0a9ba8dbb328bb54 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Wed, 13 Nov 2024 12:31:17 +0000
Subject: [PATCH] ci(github): set local tunable for github actions.

---
 .github/workflows/main.yml | 1 +
 tests/github.local         | 9 +++++++++
 2 files changed, 10 insertions(+)
 create mode 100644 tests/github.local

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 27c8e3d8..59449cb4 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -97,6 +97,7 @@ jobs:
 
       - name: Install apparmor.d
         run: |
+          sudo install -Dm0644 tests/github.local /etc/apparmor.d/tunables/global.d/github.local
           sudo dpkg --install .pkg/apparmor.d_*_amd64.deb || true
           sudo systemctl restart apparmor.service
 
diff --git a/tests/github.local b/tests/github.local
new file mode 100644
index 00000000..b4119bc5
--- /dev/null
+++ b/tests/github.local
@@ -0,0 +1,9 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+# Local tunables addition for bats integration tests on Github Action
+
+@{p_dbus_system}+=unconfined
+@{p_dbus_session}+=unconfined
+@{p_dbus_accessibility}+=unconfined