# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only

# Profile for generic systemd unit services. Only used by tiny systemd services
# that start a shell or use context specific programs.

# It does not specify an attachment path because it is intended to be used only
# via "Px -> systemd-user-service" exec transitions from the systemd-user profile.

abi <abi/4.0>,

include <tunables/global>

profile systemd-user-service flags=(complain) {
  include <abstractions/base>
  include <abstractions/consoles>

  include if exists <usr/systemd-user-service.d>
  include if exists <local/systemd-user-service>
}

# vim:syntax=apparmor