diff --git a/addons_updater/apparmor.txt b/addons_updater/apparmor.txt index ed6e6c435..5f138da81 100644 --- a/addons_updater/apparmor.txt +++ b/addons_updater/apparmor.txt @@ -15,6 +15,12 @@ profile addon_updater flags=(attach_disconnected,mediate_deleted) { network netlink raw, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /init rix, /bin/** ix, /usr/bin/** ix, diff --git a/bazarr/apparmor.txt b/bazarr/apparmor.txt index 443686b93..880b7357b 100644 --- a/bazarr/apparmor.txt +++ b/bazarr/apparmor.txt @@ -26,6 +26,12 @@ profile bazarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/bitwarden/apparmor.txt b/bitwarden/apparmor.txt index 2b57604fa..e83acc691 100644 --- a/bitwarden/apparmor.txt +++ b/bitwarden/apparmor.txt @@ -25,6 +25,12 @@ profile bitwarden_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/booksonic_air/apparmor.txt b/booksonic_air/apparmor.txt index 088d5915a..cb59e233b 100644 --- a/booksonic_air/apparmor.txt +++ b/booksonic_air/apparmor.txt @@ -25,6 +25,12 @@ profile booksonic-air_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/calibre/apparmor.txt b/calibre/apparmor.txt index 17f52ab7d..c13d53002 100644 --- a/calibre/apparmor.txt +++ b/calibre/apparmor.txt @@ -25,6 +25,12 @@ profile calibre_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/calibre_web/apparmor.txt b/calibre_web/apparmor.txt index bda37e2a3..b96d355ca 100644 --- a/calibre_web/apparmor.txt +++ b/calibre_web/apparmor.txt @@ -25,6 +25,12 @@ profile calibre-web_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/cloudcommander/apparmor.txt b/cloudcommander/apparmor.txt index daaf6481f..6def2776d 100644 --- a/cloudcommander/apparmor.txt +++ b/cloudcommander/apparmor.txt @@ -25,6 +25,12 @@ profile cloudcommander_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/code-server/apparmor.txt b/code-server/apparmor.txt index 7688de2c4..0c05c91ef 100644 --- a/code-server/apparmor.txt +++ b/code-server/apparmor.txt @@ -25,6 +25,12 @@ profile code_server_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/elasticsearch/apparmor.txt b/elasticsearch/apparmor.txt index 8603fd3c3..a831de9e6 100644 --- a/elasticsearch/apparmor.txt +++ b/elasticsearch/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/emby/apparmor.txt b/emby/apparmor.txt index 1404b75b9..fdcdf91af 100644 --- a/emby/apparmor.txt +++ b/emby/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/enedisgateway2mqtt/apparmor.txt b/enedisgateway2mqtt/apparmor.txt index 8603fd3c3..a831de9e6 100644 --- a/enedisgateway2mqtt/apparmor.txt +++ b/enedisgateway2mqtt/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/enedisgateway2mqtt_dev/apparmor.txt b/enedisgateway2mqtt_dev/apparmor.txt index 8603fd3c3..a831de9e6 100644 --- a/enedisgateway2mqtt_dev/apparmor.txt +++ b/enedisgateway2mqtt_dev/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/filebrowser/apparmor.txt b/filebrowser/apparmor.txt index a242812f0..bb59931ab 100644 --- a/filebrowser/apparmor.txt +++ b/filebrowser/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/fireflyiii/apparmor.txt b/fireflyiii/apparmor.txt index f8de3723b..f47e0745e 100644 --- a/fireflyiii/apparmor.txt +++ b/fireflyiii/apparmor.txt @@ -25,6 +25,12 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/fireflyiii_data_importer/apparmor.txt b/fireflyiii_data_importer/apparmor.txt index f8de3723b..f47e0745e 100644 --- a/fireflyiii_data_importer/apparmor.txt +++ b/fireflyiii_data_importer/apparmor.txt @@ -25,6 +25,12 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/fireflyiii_fints_importer/apparmor.txt b/fireflyiii_fints_importer/apparmor.txt index f2f79cf52..b094ea239 100644 --- a/fireflyiii_fints_importer/apparmor.txt +++ b/fireflyiii_fints_importer/apparmor.txt @@ -25,6 +25,12 @@ profile fireflyiii_fints_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/flaresolverr/apparmor.txt b/flaresolverr/apparmor.txt index a3aa20e1f..5135e888d 100644 --- a/flaresolverr/apparmor.txt +++ b/flaresolverr/apparmor.txt @@ -25,6 +25,12 @@ profile joplin flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/flexget/apparmor.txt b/flexget/apparmor.txt index f279721e3..e934fe09d 100644 --- a/flexget/apparmor.txt +++ b/flexget/apparmor.txt @@ -21,6 +21,12 @@ profile flexget_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/gazpar2mqtt/apparmor.txt b/gazpar2mqtt/apparmor.txt index 8603fd3c3..a831de9e6 100644 --- a/gazpar2mqtt/apparmor.txt +++ b/gazpar2mqtt/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/grav/apparmor.txt b/grav/apparmor.txt index 5b7377763..e22480a88 100644 --- a/grav/apparmor.txt +++ b/grav/apparmor.txt @@ -25,6 +25,12 @@ profile grav_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/guacamole/apparmor.txt b/guacamole/apparmor.txt index 0efec14a5..5bd6d7821 100644 --- a/guacamole/apparmor.txt +++ b/guacamole/apparmor.txt @@ -25,6 +25,12 @@ profile guacamole_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/inadyn/apparmor.txt b/inadyn/apparmor.txt index 8603fd3c3..a831de9e6 100644 --- a/inadyn/apparmor.txt +++ b/inadyn/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/jackett/apparmor.txt b/jackett/apparmor.txt index 3dec4bcea..df2dcafef 100644 --- a/jackett/apparmor.txt +++ b/jackett/apparmor.txt @@ -25,6 +25,12 @@ profile jackett_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/jellyfin/apparmor.txt b/jellyfin/apparmor.txt index 44395c850..3524b0830 100644 --- a/jellyfin/apparmor.txt +++ b/jellyfin/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted) # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/joal/apparmor.txt b/joal/apparmor.txt index 8bfb181c4..cdb9479f6 100644 --- a/joal/apparmor.txt +++ b/joal/apparmor.txt @@ -21,6 +21,12 @@ profile joal_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/joplin/apparmor.txt b/joplin/apparmor.txt index a3aa20e1f..5135e888d 100644 --- a/joplin/apparmor.txt +++ b/joplin/apparmor.txt @@ -25,6 +25,12 @@ profile joplin flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/lidarr/apparmor.txt b/lidarr/apparmor.txt index e85371433..85de14c25 100644 --- a/lidarr/apparmor.txt +++ b/lidarr/apparmor.txt @@ -25,6 +25,12 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/mealie/apparmor.txt b/mealie/apparmor.txt index 6926ca0b0..c10a352cc 100644 --- a/mealie/apparmor.txt +++ b/mealie/apparmor.txt @@ -21,6 +21,12 @@ profile mealie_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/mylar3/apparmor.txt b/mylar3/apparmor.txt index 3047d0ae1..d07f3f0c4 100644 --- a/mylar3/apparmor.txt +++ b/mylar3/apparmor.txt @@ -25,6 +25,12 @@ profile mylar3_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/nextcloud/apparmor.txt b/nextcloud/apparmor.txt index 54f13dd9d..548f5d097 100644 --- a/nextcloud/apparmor.txt +++ b/nextcloud/apparmor.txt @@ -25,6 +25,12 @@ profile nextcloud_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/nzbget/apparmor.txt b/nzbget/apparmor.txt index b6c97dae8..1e7e934e6 100644 --- a/nzbget/apparmor.txt +++ b/nzbget/apparmor.txt @@ -25,6 +25,12 @@ profile nzbget_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/omada/apparmor.txt b/omada/apparmor.txt index 536f95002..2c6edef37 100644 --- a/omada/apparmor.txt +++ b/omada/apparmor.txt @@ -25,6 +25,12 @@ profile omada_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/ombi/apparmor.txt b/ombi/apparmor.txt index 12c51d088..bc2ceb3db 100644 --- a/ombi/apparmor.txt +++ b/ombi/apparmor.txt @@ -25,6 +25,12 @@ profile ombi_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/organizr/apparmor.txt b/organizr/apparmor.txt index ec86101bb..23e7f105c 100644 --- a/organizr/apparmor.txt +++ b/organizr/apparmor.txt @@ -22,6 +22,12 @@ profile organizr_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/overseerr/apparmor.txt b/overseerr/apparmor.txt index 32a469d1c..93a579ef7 100644 --- a/overseerr/apparmor.txt +++ b/overseerr/apparmor.txt @@ -25,6 +25,12 @@ profile overseerr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/paperless_ngx/apparmor.txt b/paperless_ngx/apparmor.txt index f43ff2009..5f7f112c7 100644 --- a/paperless_ngx/apparmor.txt +++ b/paperless_ngx/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_paperless_ngx flags=(attach_disconnected,mediate_deleted) # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/papermerge/apparmor.txt b/papermerge/apparmor.txt index 4fc91511b..67167b4bc 100644 --- a/papermerge/apparmor.txt +++ b/papermerge/apparmor.txt @@ -25,6 +25,12 @@ profile papermerge_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/photoprism/apparmor.txt b/photoprism/apparmor.txt index cb17dfeb0..45fa5be9b 100644 --- a/photoprism/apparmor.txt +++ b/photoprism/apparmor.txt @@ -25,6 +25,12 @@ profile photoprism flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/piwigo/apparmor.txt b/piwigo/apparmor.txt index 8cd98e562..34ca79b3b 100644 --- a/piwigo/apparmor.txt +++ b/piwigo/apparmor.txt @@ -25,6 +25,12 @@ profile piwigo_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/plex/apparmor.txt b/plex/apparmor.txt index a8450aa01..af289a4b0 100644 --- a/plex/apparmor.txt +++ b/plex/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_plex_nas flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/plex_meta_manager/apparmor.txt b/plex_meta_manager/apparmor.txt index 0ce1f85fb..13d58b6e8 100644 --- a/plex_meta_manager/apparmor.txt +++ b/plex_meta_manager/apparmor.txt @@ -25,6 +25,12 @@ profile plex-meta-manager_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/portainer/apparmor.txt b/portainer/apparmor.txt index d94bd8ca7..9b9d1a3a4 100644 --- a/portainer/apparmor.txt +++ b/portainer/apparmor.txt @@ -21,6 +21,12 @@ profile portainer_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/prowlarr/apparmor.txt b/prowlarr/apparmor.txt index a029cd032..e9d1b5fe3 100644 --- a/prowlarr/apparmor.txt +++ b/prowlarr/apparmor.txt @@ -25,6 +25,12 @@ profile prowlarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/qbittorrent/apparmor.txt b/qbittorrent/apparmor.txt index 51682a1d2..5c08fa20e 100644 --- a/qbittorrent/apparmor.txt +++ b/qbittorrent/apparmor.txt @@ -29,6 +29,12 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/radarr/apparmor.txt b/radarr/apparmor.txt index e85371433..85de14c25 100644 --- a/radarr/apparmor.txt +++ b/radarr/apparmor.txt @@ -25,6 +25,12 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/readarr/apparmor.txt b/readarr/apparmor.txt index 32f913cf2..6377c1399 100644 --- a/readarr/apparmor.txt +++ b/readarr/apparmor.txt @@ -25,6 +25,12 @@ profile readarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/requestrr/apparmor.txt b/requestrr/apparmor.txt index 6b6435dfc..4a5c22475 100644 --- a/requestrr/apparmor.txt +++ b/requestrr/apparmor.txt @@ -25,6 +25,12 @@ profile requestrr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/resiliosync/apparmor.txt b/resiliosync/apparmor.txt index 11f4e5e61..09a595077 100644 --- a/resiliosync/apparmor.txt +++ b/resiliosync/apparmor.txt @@ -25,6 +25,12 @@ profile resiliosync_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/scrutiny/apparmor.txt b/scrutiny/apparmor.txt index 08a51a81f..b358a9951 100644 --- a/scrutiny/apparmor.txt +++ b/scrutiny/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/scrutiny_fa/apparmor.txt b/scrutiny_fa/apparmor.txt index 08a51a81f..b358a9951 100644 --- a/scrutiny_fa/apparmor.txt +++ b/scrutiny_fa/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/seafile/apparmor.txt b/seafile/apparmor.txt index 646f6c57b..139ed12cf 100644 --- a/seafile/apparmor.txt +++ b/seafile/apparmor.txt @@ -25,6 +25,12 @@ profile seafile_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/sonarr/apparmor.txt b/sonarr/apparmor.txt index e73eb0ce4..95f5a7bb0 100644 --- a/sonarr/apparmor.txt +++ b/sonarr/apparmor.txt @@ -25,6 +25,12 @@ profile sonarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/spotweb/apparmor.txt b/spotweb/apparmor.txt index 1b34b8e9f..9a9dc7b70 100644 --- a/spotweb/apparmor.txt +++ b/spotweb/apparmor.txt @@ -21,6 +21,12 @@ profile spotweb_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/tandoor_recipes/apparmor.txt b/tandoor_recipes/apparmor.txt index 19685785f..0b1077914 100644 --- a/tandoor_recipes/apparmor.txt +++ b/tandoor_recipes/apparmor.txt @@ -21,6 +21,12 @@ profile tandoor_recipes_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/tdarr/apparmor.txt b/tdarr/apparmor.txt index 78c5be80d..a48f8a118 100644 --- a/tdarr/apparmor.txt +++ b/tdarr/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_tdarr flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/teamspeak/apparmor.txt b/teamspeak/apparmor.txt index d96fe9af7..3faf93bf9 100644 --- a/teamspeak/apparmor.txt +++ b/teamspeak/apparmor.txt @@ -21,6 +21,12 @@ profile teamspeak_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/transmission/apparmor.txt b/transmission/apparmor.txt index 6fe522169..daccaf91f 100644 --- a/transmission/apparmor.txt +++ b/transmission/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_transmission flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/transmission_openvpn/apparmor.txt b/transmission_openvpn/apparmor.txt index eed8d0d3e..9f0f009a9 100644 --- a/transmission_openvpn/apparmor.txt +++ b/transmission_openvpn/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_transmission_openvpn flags=(attach_disconnected,mediate_deleted # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/ubooquity/apparmor.txt b/ubooquity/apparmor.txt index 65b053c4c..69d00ab6d 100644 --- a/ubooquity/apparmor.txt +++ b/ubooquity/apparmor.txt @@ -25,6 +25,12 @@ profile ubooquity_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/unpackerr/apparmor.txt b/unpackerr/apparmor.txt index e197323b9..2bd0986c7 100644 --- a/unpackerr/apparmor.txt +++ b/unpackerr/apparmor.txt @@ -25,6 +25,12 @@ profile unpackerr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/webtop_kde/apparmor.txt b/webtop_kde/apparmor.txt index d04322a78..4d4426a61 100644 --- a/webtop_kde/apparmor.txt +++ b/webtop_kde/apparmor.txt @@ -25,6 +25,12 @@ profile webtop_kde_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/webtrees/apparmor.txt b/webtrees/apparmor.txt index e2bd5a472..9a587890c 100644 --- a/webtrees/apparmor.txt +++ b/webtrees/apparmor.txt @@ -21,6 +21,12 @@ profile webtrees_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/wger/apparmor.txt b/wger/apparmor.txt index c4fd69840..ea55d1af9 100644 --- a/wger/apparmor.txt +++ b/wger/apparmor.txt @@ -21,6 +21,12 @@ profile wger_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/whoogle/apparmor.txt b/whoogle/apparmor.txt index 8fb81ea80..142df6140 100644 --- a/whoogle/apparmor.txt +++ b/whoogle/apparmor.txt @@ -25,6 +25,12 @@ profile whoogle-search_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/xteve/apparmor.txt b/xteve/apparmor.txt index 9abe422a1..96f6aa6cd 100644 --- a/xteve/apparmor.txt +++ b/xteve/apparmor.txt @@ -21,6 +21,12 @@ profile xteve_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/zoneminder/apparmor.txt b/zoneminder/apparmor.txt index 34d6c765f..cc33ef510 100644 --- a/zoneminder/apparmor.txt +++ b/zoneminder/apparmor.txt @@ -25,6 +25,12 @@ profile zoneminder_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix,