mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
87e0151c7c
I'd like to store my wg creds in my TPM module using `systemd-creds`: ```bash PostUp = systemd-creds --name wg0 decrypt /etc/wireguard/secrets/wg0.cred | wg set wg0 private-key /dev/stdin ``` Currently I use `local/wg-quick` as work-around. The `Ux` permission is may be a little too open, but 2 problems remain: - the profile maintainer can't know which creds file need to be accessible - different TMP module implementations / drivers may require different permissions MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1644 Approved-by: John Johansen <john@jjmx.net> Merged-by: John Johansen <john@jjmx.net>