Add AppArmor profiles

1 files changed, 26 insertions, 0 deletions

diff --git a/contrib/apparmor/usr.local.lib.gnunet.libexec.gnunet-service-revocation b/contrib/apparmor/usr.local.lib.gnunet.libexec.gnunet-service-revocation
new file mode 100644
index 000000000..c226502b3
--- /dev/null
+++ b/contrib/apparmor/usr.local.lib.gnunet.libexec.gnunet-service-revocation
@@ -0,0 +1,26 @@
+# Last Modified: Thu Jul  9 10:16:30 2015
+
+#include <tunables/global>
+
+/usr/local/lib/gnunet/libexec/gnunet-service-revocation {
+  #include <abstractions/gnunet-common>
+  
+  /etc/gnunet.conf r,
+  @{HOME}/.config/gnunet.conf r,
+
+  /tmp/gnunet-system-runtime/gnunet-service-revocation.unix w,
+
+  /var/lib/gnunet/.local/share/gnunet/revocation.dat rw,
+
+  @{HOME}/.local/share/gnunet/revocation.dat rw,
+
+  /usr/lib/ld-*.so r,
+
+  /usr/local/lib/gnunet/libexec/gnunet-service-revocation mr,
+
+  #Gnunet librairies
+  /usr/local/lib/libgnunetcore.so.* mr,
+  /usr/local/lib/libgnunetrevocation.so.* mr,
+  /usr/local/lib/libgnunetset.so.* mr,
+  /usr/local/lib/libgnunetstatistics.so.* mr,
+}