apparmor.d/apparmor.d/profiles-s-z/torsocks
Jeroen Rijken 40b171ee94 Replace shells with new sh_path variable
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
2024-02-21 13:56:40 +00:00

28 lines
599 B
Plaintext

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/torsocks
profile torsocks @{exec_path} {
include <abstractions/base>
# include <abstractions/app-launcher-root>
capability dac_read_search,
@{exec_path} rm,
@{sh_path} rix,
@{bin}/* rPUx,
@{lib}/uwt/uwtexec rPUx,
@{bin}/getcap rix,
/etc/tor/torsocks.conf r,
include if exists <local/torsocks>
}