jeans/developers.home-assistant
jeans/developers.home-assistant
1
0
Fork 0
mirror of https://github.com/home-assistant/developers.home-assistant.git synced 2025-07-16 13:56:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix Apparmor profile for what we need (#810)

Browse Source 
* Fix Apparmor profile for what we need

* fix bashio
This commit is contained in:
Pascal Vizeli 2021-02-16 15:51:34 +01:00 committed by GitHub
parent f47b758513
commit 6be542479e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
docs/add-ons/presentation.md
View File

@ -62,29 +62,34 @@ profile ADDON_SLUG flags=(attach_disconnected,mediate_deleted) {
# Capabilities # Capabilities
file, file,
signal
# S6-Overlay # S6-Overlay
/bin/** ix, /bin/** ix,
/usr/bin/** ix, /usr/bin/** ix,
/usr/lib/bashio/** ix,
/etc/s6/** ix, /etc/s6/** ix,
/run/s6/** ix, /run/s6/** rwix,
/etc/services.d/** rwix, /etc/services.d/** rwix,
/etc/cont-init.d/** rwix, /etc/cont-init.d/** rwix,
/etc/cont-finish.d/** rwix, /etc/cont-finish.d/** rwix,
/var/run/** rw, /run/** rwk,
# suppress ptrace denials when using 'docker ps' or using 'ps' inside a container # Bashio
ptrace (trace,read) peer=docker-default, /usr/lib/bashio/** ix,
/tmp/** rw,
# docker daemon confinement requires explict allow rule for signal
signal (receive) set=(kill,term) peer=/usr/bin/docker,
# Access to hardware devices
# /dev/ttyUSB0 rw,
# Access to Options.json and other files within your addon # Access to Options.json and other files within your addon
/data/** rw, /data/** rw,
# Start new profile for service
/usr/bin/myprogram cx,
profile usr/bin/myprogram flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
# Receive signals from S6-Overlay
signal receive,
}
} }
``` ```