feat(profile): add snapshot.

This commit is contained in:
Alexandre Pujol 2024-06-24 17:40:34 +01:00
parent 81ac0d0b6d
commit cf8ae8b147
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
2 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,28 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# vim:syntax=apparmor
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/snapshot
profile snapshot @{exec_path} {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/common/gnome>
include <abstractions/gstreamer>
include <abstractions/nameservice-strict>
@{exec_path} mr,
owner @{user_pictures_dirs}/Camera/{,**} rw,
owner @{user_videos_dirs}/Camera/{,**} rw,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
include if exists <local/snapshot>
}
# vim:syntax=apparmor

View File

@ -294,6 +294,7 @@ snap-update-ns complain
snapd complain
snapd-apparmor complain
snapd-core-fixup complain
snapshot complain
ssservice complain
startplasma complain
startx attach_disconnected,complain