diff --git a/apparmor.d/profiles-a-f/e2scrub_all b/apparmor.d/profiles-a-f/e2scrub_all new file mode 100644 index 00000000..49cbf0d3 --- /dev/null +++ b/apparmor.d/profiles-a-f/e2scrub_all @@ -0,0 +1,27 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2023 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{bin}/e2scrub_all +profile e2scrub_all @{exec_path} flags=(attach_disconnected) { + include + include + + capability sys_admin, + capability sys_rawio, + + @{exec_path} mr, + + @{bin}/{,ba,da}sh r, + @{bin}/readlink rix, + + /etc/e2scrub.conf r, + + /dev/tty rw, + + include if exists +} \ No newline at end of file