diff --git a/apparmor.d/profiles-s-z/superproductivity b/apparmor.d/profiles-s-z/superproductivity new file mode 100644 index 00000000..f8295f31 --- /dev/null +++ b/apparmor.d/profiles-s-z/superproductivity @@ -0,0 +1,37 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{name} = super{p,P}roductivity +@{lib_dirs} = /opt/@{name} +@{config_dirs} = @{user_config_dirs}/@{name} +@{cache_dirs} = @{user_cache_dirs}/@{name} + +@{exec_path} = @{bin}/@{name} @{lib_dirs}/@{name} +profile superproductivity @{exec_path} flags=(attach_disconnected) { + include + include + include + include + + network inet stream, + network inet6 stream, + network inet dgram, + network inet6 dgram, + network netlink raw, + + @{exec_path} mrix, + + @{bin}/speech-dispatcher rPx, + @{open_path} rPx -> child-open-strict, + + @{run}/systemd/inhibit/@{int}.ref rw, + + include if exists +} + +# vim:syntax=apparmor diff --git a/dists/flags/main.flags b/dists/flags/main.flags index 88cb2d17..f2091d4f 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -331,6 +331,7 @@ steam-runtime attach_disconnected,complain steamerrorreporter attach_disconnected,complain strawberry attach_disconnected,mediate_deleted,complain sulogin complain +superproductivity attach_disconnected,complain switcherooctl complain swtpm complain swtpm_ioctl complain