mirror of
https://git.wownero.com/wownero/wownero.git
synced 2024-08-15 01:03:23 +00:00
a3c9befbb5
Add AppArmor profiles to lock down daemon and cli wallet.
19 lines
578 B
Text
19 lines
578 B
Text
#include <tunables/global>
|
|
|
|
profile wownerod /usr/{,local/}bin/wownerod {
|
|
#include <abstractions/base>
|
|
#include <abstractions/openssl>
|
|
|
|
/etc/inputrc r,
|
|
/etc/terminfo/** r,
|
|
|
|
/sys/devices/**/rotational r,
|
|
|
|
owner /home/*/.wownero/{,/testnet/,/stagenet/} w,
|
|
owner /home/*/.wownero/{,/testnet/,/stagenet/}lmdb/ w,
|
|
owner /home/*/.wownero/{,/testnet/,/stagenet/}lmdb/* rwk,
|
|
owner /home/*/.wownero/{,/testnet/,/stagenet/}p2pstate.bin rw,
|
|
owner /home/*/.wownero/{,/testnet/,/stagenet/}wownero.conf r,
|
|
owner /home/*/.wownero/{,/testnet/,/stagenet/}wownero.log w,
|
|
|
|
}
|