diff --git a/apparmor.d/profiles-a-f/apparmor.systemd b/apparmor.d/profiles-a-f/apparmor.systemd new file mode 100644 index 00000000..8105efa7 --- /dev/null +++ b/apparmor.d/profiles-a-f/apparmor.systemd @@ -0,0 +1,29 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}lib/apparmor/apparmor.systemd +profile apparmor.systemd @{exec_path} { + include + + @{exec_path} mr, + + /{usr/,}bin/{,ba,da}sh rix, + /{usr/,}{s,}bin/aa-status rPx, + /{usr/,}sbin/apparmor_parser rPx, + + /{usr/,}lib/apparmor/rc.apparmor.functions r, + + @{sys}/fs/cgroup/systemd/ r, + @{sys}/kernel/security/apparmor/{,**} r, + @{sys}/module/apparmor/ r, + + @{PROC}/filesystems r, + @{PROC}/mounts r, + + include if exists +} \ No newline at end of file