diff --git a/docs/add-ons/presentation.md b/docs/add-ons/presentation.md index e4a29630..d5813917 100644 --- a/docs/add-ons/presentation.md +++ b/docs/add-ons/presentation.md @@ -43,7 +43,29 @@ If you are in need of a guide on keeping a changelog, we would recommend checkin ## AppArmor -You can use own security profile for you Add-on with AppArmor. Default it is enabled and use the Docker default profile. Put `apparmor.txt` file into your Add-on folder and it will load this file as primary profile. Use the config options to set the name of that profile. +You can use own security profile for your add-on with AppArmor. By default it is enabled and uses the Docker default profile. Putting a `apparmor.txt` file into your add-on folder, will load that file as the primary profile instead. Use the config options to set the name of that profile. + +apparmor.txt +```txt +#include + +profile ADDON_SLUG flags=(attach_disconnected,mediate_deleted) { + #include + + # S6-Overlay + /bin/** ix, + /usr/bin/** ix, + /usr/lib/bashio/** ix, + /etc/s6/** ix, + /run/s6/** ix, + /etc/services.d/** rwix, + /etc/cont-init.d/** rwix, + /etc/cont-finish.d/** rwix, + + # Data access + /data/** rw, +} +``` ## Ingress