avm/hassio-addons
1
0
Fork 0
mirror of https://github.com/alexbelgium/hassio-addons.git synced 2026-03-17 18:22:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

Replace blanket capability, with specific capabilities in all AppArmor profiles

Browse Source 
Remove overly permissive blanket `capability,` rule (grants ALL Linux
capabilities) from 107 addon AppArmor profiles. Replace with only the
specific capabilities each addon needs based on its config.yaml
`privileged` field.

Base capabilities for all addons: setuid, setgid, chown, fowner, dac_override
Additional capabilities mapped from config.yaml privileged list:
- SYS_ADMIN -> sys_admin
- DAC_READ_SEARCH -> dac_read_search
- NET_ADMIN -> net_admin
- NET_RAW -> net_raw
- SYS_RAWIO -> sys_rawio
- SYS_TIME -> sys_time
- SYS_RESOURCE -> sys_resource

Addons with full_access: true (portainer_agent) retain blanket capability.

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-03-17 07:42:05 +00:00
parent 8156916179
commit 3c53e69161
107 changed files with 652 additions and 669 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
arpspoof/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile arpspoof_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile arpspoof_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
autobrr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile autobrr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile autobrr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
baikal/apparmor.txt
View File

@@ -4,7 +4,11 @@
profile baikal_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -19,12 +23,6 @@ profile baikal_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
battybirdnet-pi/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile battybirdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile battybirdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
bazarr/apparmor.txt
View File

@@ -4,7 +4,13 @@
profile bazarr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -19,12 +25,6 @@ profile bazarr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
binance-trading-bot/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_binance-trading-bot flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_binance-trading-bot flags=(attach_disconnected,mediate_deleted)
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

15
birdnet-go/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile db21ed7f_birdnet-go flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
capability sys_resource,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile db21ed7f_birdnet-go flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
birdnet-pi/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile birdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile birdnet-pi_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

10
birdnet-pipy/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile birdnet-pipy_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,10 +22,6 @@ profile birdnet-pipy_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# S6-Overlay
/init ix,

12
bitwarden/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile bitwarden_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile bitwarden_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
booksonic_air/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile booksonic-air_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile booksonic-air_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
browser_chromium/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile chromium_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile chromium_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
browserless_chrome/apparmor.txt
View File

@@ -4,7 +4,11 @@
profile browserlesschrome_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -19,12 +23,6 @@ profile browserlesschrome_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

15
calibre/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile calibre_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability net_admin,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile calibre_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

15
calibre_web/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile calibre-web_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability net_admin,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile calibre-web_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
changedetection.io/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile addon_db21ed7f_changedetection.io_nas flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile addon_db21ed7f_changedetection.io_nas flags=(attach_disconnected,mediate
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
cleanuparr/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile cleanuparr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile cleanuparr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
cloudcommander/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile cloudcommander_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile cloudcommander_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
codex/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_codex flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_codex flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
collabora/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile collabora_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile collabora_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
comixed/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
elasticsearch/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

14
emby/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
emby_beta/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
enedisgateway2mqtt/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

8
enedisgateway2mqtt_dev/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

14
ente/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
epicgamesfree/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile epicgamesfree_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile epicgamesfree_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
filebrowser/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
filebrowser_quantum/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
fireflyiii/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
fireflyiii_data_importer/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
fireflyiii_fints_importer/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile fireflyiii_fints_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile fireflyiii_fints_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
flaresolverr/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile joplin flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile joplin flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
capability sys_rawio,
# S6-Overlay
/init ix,

8
flexget/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile flexget_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile flexget_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

12
free_games_claimer/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile free_games_claimer_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile free_games_claimer_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
gazpar2mqtt/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

12
gitea/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
grampsweb/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile grampsweb_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile grampsweb_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
grav/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile grav_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile grav_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
guacamole/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile guacamole_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile guacamole_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
immich/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
immich_frame/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile db21ed7f_immich_frame flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile db21ed7f_immich_frame flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
immich_power_tools/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile db21ed7f_immich_power_tools flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile db21ed7f_immich_power_tools flags=(attach_disconnected,mediate_deleted)
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
inadyn/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

14
jackett/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile jackett_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile jackett_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

15
jellyfin/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability net_admin,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted)
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability sys_rawio,
capability dac_read_search,
# capability dac_override,
# S6-Overlay
/init ix,

8
joal/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile joal_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile joal_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

13
joplin/apparmor.txt
View File

@@ -3,7 +3,12 @@
profile joplin flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
capability sys_time,
file,
signal,
mount,
@@ -18,12 +23,6 @@ profile joplin flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
capability sys_rawio,
# S6-Overlay
/init ix,

14
kometa/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile kometa_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile kometa_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
librespeed/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile librespeed_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile librespeed_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
lidarr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
linkwarden/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile linkwarden_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile linkwarden_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
maintainerr/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile maintainerr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile maintainerr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

6
manyfold/apparmor.txt
View File

@@ -10,7 +10,11 @@ profile hassio-addons/manyfold flags=(attach_disconnected,mediate_deleted) {
# denying known high-risk kernel interfaces.
file,
network,
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
deny /proc/kcore rwklx,
deny /proc/sysrq-trigger rwklx,

8
mealie/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile mealie_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile mealie_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

12
monica/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile monica_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile monica_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
mylar3/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile mylar3_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile mylar3_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
navidrome/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile navidrome_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile navidrome_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
netalertx/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile netalertx_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability net_admin,
capability net_raw,
capability setgid,
capability setuid,
file,
signal,
mount,

14
nextcloud/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile nextcloud_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile nextcloud_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
nzbget/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile nzbget_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile nzbget_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

6
omni-tools/apparmor.txt
View File

@@ -4,7 +4,11 @@ profile omni-tools flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
# Capabilities
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal (send) set=(kill,term,int,hup,cont),

12
openproject/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile openproject_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile openproject_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
organizr/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile organizr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,8 +22,6 @@ profile organizr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

15
photoprism/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile photoprism flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
capability sys_rawio,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile photoprism flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability dac_override,
capability sys_admin,
capability dac_read_search,
capability sys_rawio,
# S6-Overlay
/init ix,

14
piwigo/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile piwigo_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile piwigo_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
plex/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile addon_db21ed7f_plex_nas flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile addon_db21ed7f_plex_nas flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
portainer/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile portainer_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile portainer_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

12
postgres_15/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile postgres_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile postgres_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
prowlarr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile prowlarr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile prowlarr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

19
qbittorrent/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability net_admin,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,16 +25,6 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability chown,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability net_admin,
capability dac_override,
capability net_bind_service,
capability net_broadcast,
capability sys_rawio,
# S6-Overlay
/init ix,

14
radarr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
readarr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile readarr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile readarr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
requestrr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile requestrr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile requestrr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

15
resiliosync/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile resiliosync_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability net_admin,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile resiliosync_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
sabnzbd/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile sabnzbd_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile sabnzbd_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

15
scrutiny/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
capability sys_rawio,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability dac_override,
capability sys_admin,
capability dac_read_search,
capability sys_rawio,
# S6-Overlay
/init ix,

15
seafile/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile seafile_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability net_admin,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile seafile_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
seerr/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile seerr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile seerr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
social_to_mealie/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile social_to_mealie_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile social_to_mealie_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
sonarr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile sonarr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile sonarr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
spotweb/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile spotweb_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile spotweb_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

8
tandoor_recipes/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile tandoor_recipes_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile tandoor_recipes_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

14
tdarr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_tdarr flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_tdarr flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
teamspeak/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile teamspeak_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile teamspeak_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

14
transmission/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile db21ed7f_transmission flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile db21ed7f_transmission flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

15
transmission_openvpn/apparmor.txt
View File

@@ -3,7 +3,14 @@
profile db21ed7f_transmission_openvpn flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability net_admin,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +25,6 @@ profile db21ed7f_transmission_openvpn flags=(attach_disconnected,mediate_deleted
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
ubooquity/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile ubooquity_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile ubooquity_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
unpackerr/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile unpackerr_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile unpackerr_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
webtop_kde/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile webtop_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile webtop_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

10
webtrees/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile webtrees_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -17,8 +23,6 @@ profile webtrees_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

8
wger/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile wger_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile wger_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

12
whatsapper/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile gitea_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
whoogle/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile whoogle-search_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile whoogle-search_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

8
xteve/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile xteve_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -17,8 +21,6 @@ profile xteve_addon flags=(attach_disconnected,mediate_deleted) {
network inet6,
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
# S6-Overlay

12
zoneminder/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile zoneminder_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile zoneminder_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

14
zzz_archived_code-server/apparmor.txt
View File

@@ -3,7 +3,13 @@
profile code_server_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability setgid,
capability setuid,
capability sys_admin,
file,
signal,
mount,
@@ -18,12 +24,6 @@ profile code_server_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
zzz_archived_jellyseerr/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile jellyseer_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile jellyseer_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

12
zzz_archived_omada/apparmor.txt
View File

@@ -3,7 +3,11 @@
profile omada_addon flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
capability,
capability chown,
capability dac_override,
capability fowner,
capability setgid,
capability setuid,
file,
signal,
mount,
@@ -18,12 +22,6 @@ profile omada_addon flags=(attach_disconnected,mediate_deleted) {
network netlink raw,
network unix dgram,
capability setgid,
capability setuid,
capability sys_admin,
capability dac_read_search,
# capability dac_override,
# capability sys_rawio,
# S6-Overlay
/init ix,

Some files were not shown because too many files have changed in this diff Show More