1 files changed, 34 insertions, 0 deletions

diff --git a/contrib/apparmor/abstractions/gnunet-common b/contrib/apparmor/abstractions/gnunet-common
new file mode 100644
index 000000000..7d7515d80
--- /dev/null
+++ b/contrib/apparmor/abstractions/gnunet-common
@@ -0,0 +1,34 @@
+# This files contains common permissions for gnunet
+
+  /usr/share/zoneinfo/                    r,
+  /usr/share/zoneinfo/**                  r,
+  
+  /dev/urandom                            r,
+  
+  /etc/ld.so.cache                        r,
+
+  @{PROC}/@{pid}/maps                     r,
+
+  #Gnunet configuration file
+  /usr/local/share/gnunet/config.d/       r,
+  /usr/local/share/gnunet/config.d/*.conf r,
+  
+  /etc/gnunet.conf                        r,
+  owner @{HOME}/.config/gnunet.conf       r,
+
+  #Librairies
+  /usr/lib/libc-*.so                      mr,
+  /usr/lib/libdl-*.so                     mr,
+  /usr/lib/libgcrypt.so.*                 mr,
+  /usr/lib/libltdl.so.*                   mr,
+  /usr/lib/libgpg-error.so.*              mr,
+  /usr/lib/libm-*.so                      mr,
+  /usr/lib/libunistring.so.*              mr,
+  /usr/lib/libz.so.*                      mr,
+
+  #Gnunet librairies
+  /usr/local/lib/libgnunetutil.so.*       mr,
+  
+  #For testbed (if the /tmp directory is used)
+  /tmp/testbed*/                          rw,
+  /tmp/testbed*/**                        rwk,