Add AppArmor profiles

1 files changed, 16 insertions, 0 deletions

diff --git a/contrib/apparmor/usr.local.lib.gnunet.libexec.gnunet-helper-vpn b/contrib/apparmor/usr.local.lib.gnunet.libexec.gnunet-helper-vpn
new file mode 100644
index 000000000..3f9051db3
--- /dev/null
+++ b/contrib/apparmor/usr.local.lib.gnunet.libexec.gnunet-helper-vpn
@@ -0,0 +1,16 @@
+# Last Modified: Mon Jul 27 11:06:22 2015
+#include <tunables/global>
+
+/usr/local/lib/gnunet/libexec/gnunet-helper-vpn flags=(complain) {
+
+  capability net_admin,
+  capability setuid,
+
+  /dev/net/tun rw,
+  /etc/ld.so.cache r,
+  /usr/lib/ld-*.so r,
+  /usr/lib/libc-*.so mr,
+  /usr/lib/libm-*.so mr,
+  /usr/local/lib/gnunet/libexec/gnunet-helper-vpn mr,
+
+}