aboutsummaryrefslogtreecommitdiff
path: root/contrib/apparmor/gnunet-service-arm
diff options
context:
space:
mode:
Diffstat (limited to 'contrib/apparmor/gnunet-service-arm')
-rw-r--r--contrib/apparmor/gnunet-service-arm90
1 files changed, 12 insertions, 78 deletions
diff --git a/contrib/apparmor/gnunet-service-arm b/contrib/apparmor/gnunet-service-arm
index 5a4a78657..546e6332e 100644
--- a/contrib/apparmor/gnunet-service-arm
+++ b/contrib/apparmor/gnunet-service-arm
@@ -3,37 +3,16 @@
3#include <tunables/gnunet> 3#include <tunables/gnunet>
4 4
5profile @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-arm { 5profile @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-arm {
6 #include <abstractions/base>
6 #include <abstractions/gnunet-common> 7 #include <abstractions/gnunet-common>
7 8
8 /dev/null ra,
9
10 /tmp/gnunet-*-runtime/ rw, 9 /tmp/gnunet-*-runtime/ rw,
11 /tmp/gnunet-*-runtime/gnunet-service-arm.sock rw, 10# /tmp/gnunet-*-runtime/gnunet-service-arm.sock rw,
12 /tmp/gnunet-*-runtime/gnunet-service-gns.sock rw, 11# /tmp/gnunet-*-runtime/gnunet-service-namestore.sock r,
13 /tmp/gnunet-*-runtime/gnunet-service-identity.unix rw, 12# /tmp/gnunet-*-runtime/gnunet-service-identity.sock r,
14 /tmp/gnunet-*-runtime/gnunet-service-namestore.sock rw, 13# /tmp/gnunet-*-runtime/gnunet-service-gns.sock r,
15
16 /tmp/gnunet-system-runtime/ rw,
17 /tmp/gnunet-system-runtime/gnunet-service-*.sock rw,
18 /tmp/gnunet-system-runtime/gnunet-service-nse.unix rw,
19 /tmp/gnunet-system-runtime/gnunet-service-revocation.unix rw,
20
21 /var/lib/gnunet/.local/share/gnunet/ r,
22 /var/lib/gnunet/.local/share/gnunet/revocation.dat r,
23 /var/lib/gnunet/.local/share/gnunet/peerstore/ a,
24 /var/lib/gnunet/.local/share/gnunet/peerstore/sqlite.db rwk,
25 /var/lib/gnunet/.local/share/gnunet/peerstore/sqlite.db-journal rw,
26 /var/lib/gnunet/.config/gnunet.conf r,
27
28 #Librairies
29 /usr/lib/ld-*.so r,
30 /usr/lib/libpthread-*.so mr,
31 14
32 /usr/lib/libsqlite3.so.* mr, 15 /tmp/gnunet-*-runtime/gnunet-service-*.sock rw,
33
34 /usr/lib/locale/locale-archive r,
35
36 /usr/share/locale/locale-alias r,
37 16
38 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-arm mr, 17 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-arm mr,
39 18
@@ -41,7 +20,7 @@ profile @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-arm {
41 20
42 @{GNUNET_PREFIX}/lib/gnunet/libexec/ r, 21 @{GNUNET_PREFIX}/lib/gnunet/libexec/ r,
43 22
44 #Gnunet daemon 23 #GNUnet daemon
45 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-daemon-exit Px, 24 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-daemon-exit Px,
46 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-daemon-hostlist Px, 25 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-daemon-hostlist Px,
47 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-daemon-latency-logger Px, 26 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-daemon-latency-logger Px,
@@ -55,54 +34,9 @@ profile @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-arm {
55 34
56 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-namestore-fcfsd Px, 35 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-namestore-fcfsd Px,
57 36
58 #Gnunet service 37 #GNUnet service
59 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-ats Px, 38 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-* Px,
60 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-cadet Px, 39
61 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-core Px, 40 # Site-specific additions and overrides. See local/README for details.
62 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-conversation Px, 41 #include <local/gnunet>
63 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-datastore Px,
64 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-dht Px,
65 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-dns Px,
66 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-fs Px,
67 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-gns Px,
68 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-identity Px,
69 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-namecache Px,
70 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-namestore Px,
71 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-nse Px,
72 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-peerinfo Px,
73 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-peerstore Px,
74 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-regex Px,
75 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-resolver Px,
76 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-revocation Px,
77 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-set Px,
78 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-scalarproduct-alice Px,
79 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-scalarproduct-bob Px,
80 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-statistics Px,
81 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-template Px,
82 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-testbed Px,
83 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-testbed-logger Px,
84 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-transport Px,
85 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-service-vpn Px,
86
87 #Gnunet helper
88 @{GNUNET_PREFIX}/lib/gnunet/libexec/gnunet-helper-dns r,
89
90 #Gnunet librairies
91 @{GNUNET_PREFIX}/lib/libgnunetats.so.* mr,
92 @{GNUNET_PREFIX}/lib/libgnunetcadet.so.* mr,
93 @{GNUNET_PREFIX}/lib/libgnunetdht.so.* mr,
94 @{GNUNET_PREFIX}/lib/libgnunetdnsstub.so.* mr,
95 @{GNUNET_PREFIX}/lib/libgnunetgnsrecord.so.* r,
96 @{GNUNET_PREFIX}/lib/libgnunethello.so.* mr,
97 @{GNUNET_PREFIX}/lib/libgnunetnamecache.so.* r,
98 @{GNUNET_PREFIX}/lib/libgnunetpeerstore.so.* mr,
99 @{GNUNET_PREFIX}/lib/libgnunetregex.so.* mr,
100 @{GNUNET_PREFIX}/lib/libgnunetset.so.* mr,
101 @{GNUNET_PREFIX}/lib/libgnunetstatistics.so.* mr,
102 @{GNUNET_PREFIX}/lib/libgnunettransport.so.* mr,
103 @{GNUNET_PREFIX}/lib/libgnunettun.so.* mr,
104
105 #Gnunet plugin
106 @{GNUNET_PREFIX}/lib/gnunet/libgnunet_plugin_peerstore_sqlite.la r,
107 @{GNUNET_PREFIX}/lib/gnunet/libgnunet_plugin_peerstore_sqlite.so mr,
108} 42}