1 files changed, 26 insertions, 0 deletions

diff --git a/contrib/apparmor/gnunet-transport-certificate-creation b/contrib/apparmor/gnunet-transport-certificate-creation
new file mode 100644
index 000000000..fa65305d7
--- /dev/null
+++ b/contrib/apparmor/gnunet-transport-certificate-creation
@@ -0,0 +1,26 @@
+# Last Modified: Mon Aug 10 17:31:32 2015
+#include <tunables/global>
+#include <tunables/gnunet>
+
+profile @{GNUNET_PREFIX}/bin/gnunet-transport-certificate-creation {
+  #include <abstractions/base>
+  #include <abstractions/openssl>
+  #include <abstractions/gnunet-common>
+
+  @{HOME}/.rnd rw,
+
+  @{PROC}/meminfo r,
+
+  /usr/bin/openssl rix,
+
+  @{GNUNET_PREFIX}/bin/gnunet-transport-certificate-creation mr,
+
+  #Access to arg privatekey and certificate ?
+  @{HOME}/ rw,
+  @{HOME}/** rw,
+  deny @{HOME}/.*/ rw,
+  deny @{HOME}/.*/** rw,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/gnunet>
+}