Add initial version of the add-on code

This commit is contained in:
Adrian Jagielak
2025-07-21 22:28:31 +02:00
parent bcfa60a749
commit 1c43d8a3ec
25 changed files with 3159 additions and 68 deletions

View File

@@ -42,13 +42,6 @@ profile example flags=(attach_disconnected,mediate_deleted) {
# Access to mapped volumes specified in config.json
/share/** rw,
# Access required for service functionality
# Note: List was built by doing the following:
# 1. Add what is obviously needed based on what is in the script
# 2. Add `complain` as a flag to this profile temporarily and run the addon
# 3. Review the audit log with `journalctl _TRANSPORT="audit" -g 'apparmor="ALLOWED"'` and add other access as needed
# Remember to remove the `complain` flag when you are done
/usr/bin/my_program r,
/bin/bash rix,
/bin/echo ix,
/etc/passwd r,