mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 14:25:52 +00:00
b50f516a78
- set filetype, instead of syntax, in vim modelines - replace filetype of subdomain with apparmor - move modelines in the first or last five lines of each file so that vim can recognize them
47 lines
946 B
Plaintext
47 lines
946 B
Plaintext
#
|
|
# Example usage for a program named 'foo' which is installed in /opt/foo
|
|
# $ aa-easyprof --template=sandbox \
|
|
# --template-var="@{APPNAME}=foo" \
|
|
# --policy-groups=opt-application,user-application \
|
|
# /opt/foo/bin/foo
|
|
#
|
|
###ENDUSAGE###
|
|
# AppArmor policy for ###NAME###
|
|
|
|
#include <tunables/global>
|
|
|
|
###VAR###
|
|
|
|
###PROFILEATTACH### {
|
|
#include <abstractions/base>
|
|
#include <abstractions/gnome>
|
|
#include <abstractions/kde>
|
|
|
|
#include <abstractions/X>
|
|
audit deny @{HOME}/.Xauthority mrwlk,
|
|
|
|
/etc/passwd r,
|
|
|
|
/ r,
|
|
/**/ r,
|
|
/usr/** r,
|
|
/var/lib/dbus/machine-id r,
|
|
|
|
owner @{PROC}/[0-9]*/auxv r,
|
|
owner @{PROC}/[0-9]*/fd/ r,
|
|
owner @{PROC}/[0-9]*/environ r,
|
|
owner @{PROC}/[0-9]*/mounts r,
|
|
owner @{PROC}/[0-9]*/smaps r,
|
|
owner @{PROC}/[0-9]*/statm r,
|
|
owner @{PROC}/[0-9]*/task/[0-9]*/stat r,
|
|
|
|
###ABSTRACTIONS###
|
|
|
|
###POLICYGROUPS###
|
|
|
|
###READS###
|
|
|
|
###WRITES###
|
|
}
|
|
# vim:ft=apparmor
|