From cc9e7fdde156bb11ea33bbd3b2063cd617d68ba6 Mon Sep 17 00:00:00 2001
From: valoq <valoq@mailbox.org>
Date: Fri, 7 Jun 2024 10:57:21 +0200
Subject: [PATCH] add preview tools

---
 apparmor.d/profiles-a-f/elinks            | 21 +++++++++++++++++++++
 apparmor.d/profiles-a-f/ffmpegthumbnailer | 17 +++++++++++++++++
 apparmor.d/profiles-g-l/img2txt           | 17 +++++++++++++++++
 apparmor.d/profiles-m-r/odt2txt           | 17 +++++++++++++++++
 apparmor.d/profiles-m-r/pdftotext         | 19 +++++++++++++++++++
 apparmor.d/profiles-s-z/w3m               | 19 +++++++++++++++++++
 6 files changed, 110 insertions(+)
 create mode 100644 apparmor.d/profiles-a-f/elinks
 create mode 100644 apparmor.d/profiles-a-f/ffmpegthumbnailer
 create mode 100644 apparmor.d/profiles-g-l/img2txt
 create mode 100644 apparmor.d/profiles-m-r/odt2txt
 create mode 100644 apparmor.d/profiles-m-r/pdftotext
 create mode 100644 apparmor.d/profiles-s-z/w3m

diff --git a/apparmor.d/profiles-a-f/elinks b/apparmor.d/profiles-a-f/elinks
new file mode 100644
index 00000000..7154acb5
--- /dev/null
+++ b/apparmor.d/profiles-a-f/elinks
@@ -0,0 +1,21 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/elinks
+profile elinks @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/nameservice-strict>
+  include <abstractions/ssl_certs>
+  include <abstractions/user-read>
+
+  @{exec_path} mr,
+
+  owner @{user_config_dirs}/elinks/{,**} rw,
+
+  include if exists <local/elinks>
+}
diff --git a/apparmor.d/profiles-a-f/ffmpegthumbnailer b/apparmor.d/profiles-a-f/ffmpegthumbnailer
new file mode 100644
index 00000000..f1b3b181
--- /dev/null
+++ b/apparmor.d/profiles-a-f/ffmpegthumbnailer
@@ -0,0 +1,17 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/ffmpegthumbnailer
+profile ffmpegthumbnailer @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-write>
+
+  @{exec_path} mr,
+
+  include if exists <local/ffmpegthumbnailer>
+}
diff --git a/apparmor.d/profiles-g-l/img2txt b/apparmor.d/profiles-g-l/img2txt
new file mode 100644
index 00000000..d409f0a5
--- /dev/null
+++ b/apparmor.d/profiles-g-l/img2txt
@@ -0,0 +1,17 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/img2txt
+profile img2txt @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read>
+
+  @{exec_path} mr,
+
+  include if exists <local/img2txt>
+}
diff --git a/apparmor.d/profiles-m-r/odt2txt b/apparmor.d/profiles-m-r/odt2txt
new file mode 100644
index 00000000..13a29167
--- /dev/null
+++ b/apparmor.d/profiles-m-r/odt2txt
@@ -0,0 +1,17 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/odt2txt
+profile odt2txt @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-write>
+
+  @{exec_path} mr,
+
+  include if exists <local/odt2txt>
+}
diff --git a/apparmor.d/profiles-m-r/pdftotext b/apparmor.d/profiles-m-r/pdftotext
new file mode 100644
index 00000000..e0230d62
--- /dev/null
+++ b/apparmor.d/profiles-m-r/pdftotext
@@ -0,0 +1,19 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/pdftotext
+profile pdftotext @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-write>
+
+  @{exec_path} mr,
+
+  /usr/share/poppler/{,**} r,
+
+  include if exists <local/pdftotext>
+}
diff --git a/apparmor.d/profiles-s-z/w3m b/apparmor.d/profiles-s-z/w3m
new file mode 100644
index 00000000..60f66149
--- /dev/null
+++ b/apparmor.d/profiles-s-z/w3m
@@ -0,0 +1,19 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2024 valoq <valoq@mailbox.org>
+# SPDX-License-Identifier: GPL-2.0-only
+
+abi <abi/3.0>,
+
+include <tunables/global>
+
+@{exec_path} = @{bin}/w3m
+profile w3m @{exec_path} {
+  include <abstractions/base>
+  include <abstractions/user-read>
+
+  @{exec_path} mr,
+
+  /usr/share/terminfo/{,**} r,
+
+  include if exists <local/w3m>
+}