Add AppArmor profile

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
This commit is contained in:
Georg Pfuetzenreuter 2024-08-29 03:50:25 +02:00
parent c3564f8f0d
commit 2e6b130728
Signed by: Georg
GPG Key ID: 1ED2F138E7E6FF57
2 changed files with 26 additions and 1 deletions

View File

@ -10,15 +10,18 @@
PREFIX=/usr/local
BINDIR=$(PREFIX)/bin
MANDIR=$(PREFIX)/man
SYSCONFDIR=$(PREFIX)/etc
usage:
@echo 'Available targets: "install", "uninstall"'
install:
install -d $(DESTDIR)$(BINDIR) $(DESTDIR)$(MANDIR)/man1
install -d $(DESTDIR)$(BINDIR) $(DESTDIR)$(MANDIR)/man1 $(SYSCONFDIR)/apparmor.d
install buddycheck.pl $(DESTDIR)$(BINDIR)/buddycheck
pod2man buddycheck.1 > $(DESTDIR)$(MANDIR)/man1/buddycheck.1
sed s?__BINDIR__?$(BINDIR)? buddycheck.apparmor > $(SYSCONFDIR)/apparmor.d/buddycheck
uninstall:
rm $(DESTDIR)$(BINDIR)/buddycheck
rm $(DESTDIR)$(MANDIR)/man1/buddycheck.1
rm $(SYSCONFDIR)/apparmor.d/buddycheck

22
buddycheck.apparmor Normal file
View File

@ -0,0 +1,22 @@
# AppArmor profile for BuddyCheck
#
# Copyright 2024, Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
#
# Licensed under the EUPL, Version 1.2 or - as soon they will be approved by the European Commission - subsequent versions of the EUPL (the "Licence").
# You may not use this work except in compliance with the Licence.
# An English copy of the Licence is shipped in a file called LICENSE along with this applications source code.
# You may obtain copies of the Licence in any of the official languages at https://joinup.ec.europa.eu/collection/eupl/eupl-text-eupl-12.
abi <abi/3.0>,
include <tunables/global>
profile buddycheck /usr/local/bin/buddycheck {
include <abstractions/base>
include <abstractions/nameservice>
include <abstractions/perl>
/usr/bin/perl ix,
/usr/local/bin/buddycheck r,
}