From 73869be1c708da2c9461a8103517a3a1e468b592 Mon Sep 17 00:00:00 2001 From: Alexandre Date: Wed, 15 Jun 2022 21:03:19 +0200 Subject: [PATCH] Revert "Revert "Prepare s6 v3"" This reverts commit db633a4e5ddc5191028effebc06f09aa3afdba59. --- addons_updater/apparmor.txt | 6 ++++++ arpspoof/apparmor.txt | 6 ++++++ bazarr/apparmor.txt | 6 ++++++ bitwarden/apparmor.txt | 6 ++++++ booksonic_air/apparmor.txt | 6 ++++++ calibre/apparmor.txt | 6 ++++++ calibre_web/apparmor.txt | 6 ++++++ cloudcommander/apparmor.txt | 6 ++++++ code-server/apparmor.txt | 6 ++++++ elasticsearch/apparmor.txt | 6 ++++++ emby/apparmor.txt | 6 ++++++ enedisgateway2mqtt/apparmor.txt | 6 ++++++ enedisgateway2mqtt_dev/apparmor.txt | 6 ++++++ filebrowser/apparmor.txt | 6 ++++++ fireflyiii/apparmor.txt | 6 ++++++ fireflyiii_data_importer/apparmor.txt | 6 ++++++ fireflyiii_fints_importer/apparmor.txt | 6 ++++++ flaresolverr/apparmor.txt | 6 ++++++ flexget/apparmor.txt | 6 ++++++ gazpar2mqtt/apparmor.txt | 6 ++++++ grav/apparmor.txt | 6 ++++++ guacamole/apparmor.txt | 6 ++++++ inadyn/apparmor.txt | 6 ++++++ jackett/apparmor.txt | 6 ++++++ jellyfin/apparmor.txt | 6 ++++++ joal/apparmor.txt | 6 ++++++ joplin/apparmor.txt | 6 ++++++ lidarr/apparmor.txt | 6 ++++++ mealie/apparmor.txt | 6 ++++++ mylar3/apparmor.txt | 6 ++++++ nextcloud/apparmor.txt | 6 ++++++ nzbget/apparmor.txt | 6 ++++++ omada/apparmor.txt | 6 ++++++ ombi/apparmor.txt | 6 ++++++ organizr/apparmor.txt | 6 ++++++ overseerr/apparmor.txt | 6 ++++++ paperless_ngx/apparmor.txt | 6 ++++++ papermerge/apparmor.txt | 6 ++++++ photoprism/apparmor.txt | 6 ++++++ piwigo/apparmor.txt | 6 ++++++ plex/apparmor.txt | 6 ++++++ plex_meta_manager/apparmor.txt | 6 ++++++ portainer/apparmor.txt | 6 ++++++ prowlarr/apparmor.txt | 6 ++++++ qbittorrent/apparmor.txt | 6 ++++++ radarr/apparmor.txt | 6 ++++++ readarr/apparmor.txt | 6 ++++++ requestrr/apparmor.txt | 6 ++++++ resiliosync/apparmor.txt | 6 ++++++ scrutiny/apparmor.txt | 6 ++++++ scrutiny_fa/apparmor.txt | 6 ++++++ seafile/apparmor.txt | 6 ++++++ sonarr/apparmor.txt | 6 ++++++ spotweb/apparmor.txt | 6 ++++++ tandoor_recipes/apparmor.txt | 6 ++++++ tdarr/apparmor.txt | 6 ++++++ teamspeak/apparmor.txt | 6 ++++++ transmission/apparmor.txt | 6 ++++++ transmission_openvpn/apparmor.txt | 6 ++++++ ubooquity/apparmor.txt | 6 ++++++ unpackerr/apparmor.txt | 6 ++++++ webtop_kde/apparmor.txt | 6 ++++++ webtrees/apparmor.txt | 6 ++++++ wger/apparmor.txt | 6 ++++++ whoogle/apparmor.txt | 6 ++++++ xteve/apparmor.txt | 6 ++++++ zoneminder/apparmor.txt | 6 ++++++ 67 files changed, 402 insertions(+) diff --git a/addons_updater/apparmor.txt b/addons_updater/apparmor.txt index ed6e6c435..8e1d8c1fe 100644 --- a/addons_updater/apparmor.txt +++ b/addons_updater/apparmor.txt @@ -15,6 +15,12 @@ profile addon_updater flags=(attach_disconnected,mediate_deleted) { network netlink raw, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /init rix, /bin/** ix, /usr/bin/** ix, diff --git a/arpspoof/apparmor.txt b/arpspoof/apparmor.txt index 9bc1ba1c8..55b1ee814 100644 --- a/arpspoof/apparmor.txt +++ b/arpspoof/apparmor.txt @@ -25,6 +25,12 @@ profile arpspoof_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/bazarr/apparmor.txt b/bazarr/apparmor.txt index 443686b93..0134eec55 100644 --- a/bazarr/apparmor.txt +++ b/bazarr/apparmor.txt @@ -26,6 +26,12 @@ profile bazarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/bitwarden/apparmor.txt b/bitwarden/apparmor.txt index 2b57604fa..63826b512 100644 --- a/bitwarden/apparmor.txt +++ b/bitwarden/apparmor.txt @@ -25,6 +25,12 @@ profile bitwarden_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/booksonic_air/apparmor.txt b/booksonic_air/apparmor.txt index 088d5915a..54f61f6b3 100644 --- a/booksonic_air/apparmor.txt +++ b/booksonic_air/apparmor.txt @@ -25,6 +25,12 @@ profile booksonic-air_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/calibre/apparmor.txt b/calibre/apparmor.txt index 17f52ab7d..87a2107a5 100644 --- a/calibre/apparmor.txt +++ b/calibre/apparmor.txt @@ -25,6 +25,12 @@ profile calibre_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/calibre_web/apparmor.txt b/calibre_web/apparmor.txt index bda37e2a3..214e0f3a5 100644 --- a/calibre_web/apparmor.txt +++ b/calibre_web/apparmor.txt @@ -25,6 +25,12 @@ profile calibre-web_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/cloudcommander/apparmor.txt b/cloudcommander/apparmor.txt index daaf6481f..9cc595c5b 100644 --- a/cloudcommander/apparmor.txt +++ b/cloudcommander/apparmor.txt @@ -25,6 +25,12 @@ profile cloudcommander_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/code-server/apparmor.txt b/code-server/apparmor.txt index 7688de2c4..3d6c392ee 100644 --- a/code-server/apparmor.txt +++ b/code-server/apparmor.txt @@ -25,6 +25,12 @@ profile code_server_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/elasticsearch/apparmor.txt b/elasticsearch/apparmor.txt index 8603fd3c3..4a3212e4f 100644 --- a/elasticsearch/apparmor.txt +++ b/elasticsearch/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/emby/apparmor.txt b/emby/apparmor.txt index 1404b75b9..30e1d12f2 100644 --- a/emby/apparmor.txt +++ b/emby/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_emby_nas flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/enedisgateway2mqtt/apparmor.txt b/enedisgateway2mqtt/apparmor.txt index 8603fd3c3..4a3212e4f 100644 --- a/enedisgateway2mqtt/apparmor.txt +++ b/enedisgateway2mqtt/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/enedisgateway2mqtt_dev/apparmor.txt b/enedisgateway2mqtt_dev/apparmor.txt index 8603fd3c3..4a3212e4f 100644 --- a/enedisgateway2mqtt_dev/apparmor.txt +++ b/enedisgateway2mqtt_dev/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/filebrowser/apparmor.txt b/filebrowser/apparmor.txt index a242812f0..b7dec8eee 100644 --- a/filebrowser/apparmor.txt +++ b/filebrowser/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/fireflyiii/apparmor.txt b/fireflyiii/apparmor.txt index f8de3723b..5a7f1ca65 100644 --- a/fireflyiii/apparmor.txt +++ b/fireflyiii/apparmor.txt @@ -25,6 +25,12 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/fireflyiii_data_importer/apparmor.txt b/fireflyiii_data_importer/apparmor.txt index f8de3723b..5a7f1ca65 100644 --- a/fireflyiii_data_importer/apparmor.txt +++ b/fireflyiii_data_importer/apparmor.txt @@ -25,6 +25,12 @@ profile fireflyiii_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/fireflyiii_fints_importer/apparmor.txt b/fireflyiii_fints_importer/apparmor.txt index f2f79cf52..29e7d309e 100644 --- a/fireflyiii_fints_importer/apparmor.txt +++ b/fireflyiii_fints_importer/apparmor.txt @@ -25,6 +25,12 @@ profile fireflyiii_fints_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/flaresolverr/apparmor.txt b/flaresolverr/apparmor.txt index a3aa20e1f..e5cc781d5 100644 --- a/flaresolverr/apparmor.txt +++ b/flaresolverr/apparmor.txt @@ -25,6 +25,12 @@ profile joplin flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/flexget/apparmor.txt b/flexget/apparmor.txt index f279721e3..66c6753f7 100644 --- a/flexget/apparmor.txt +++ b/flexget/apparmor.txt @@ -21,6 +21,12 @@ profile flexget_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/gazpar2mqtt/apparmor.txt b/gazpar2mqtt/apparmor.txt index 8603fd3c3..4a3212e4f 100644 --- a/gazpar2mqtt/apparmor.txt +++ b/gazpar2mqtt/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/grav/apparmor.txt b/grav/apparmor.txt index 5b7377763..ba32636da 100644 --- a/grav/apparmor.txt +++ b/grav/apparmor.txt @@ -25,6 +25,12 @@ profile grav_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/guacamole/apparmor.txt b/guacamole/apparmor.txt index 0efec14a5..d2ac09668 100644 --- a/guacamole/apparmor.txt +++ b/guacamole/apparmor.txt @@ -25,6 +25,12 @@ profile guacamole_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/inadyn/apparmor.txt b/inadyn/apparmor.txt index 8603fd3c3..4a3212e4f 100644 --- a/inadyn/apparmor.txt +++ b/inadyn/apparmor.txt @@ -21,6 +21,12 @@ profile inadyn_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/jackett/apparmor.txt b/jackett/apparmor.txt index 3dec4bcea..7981e615a 100644 --- a/jackett/apparmor.txt +++ b/jackett/apparmor.txt @@ -25,6 +25,12 @@ profile jackett_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/jellyfin/apparmor.txt b/jellyfin/apparmor.txt index 44395c850..5ddd7c182 100644 --- a/jellyfin/apparmor.txt +++ b/jellyfin/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted) # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/joal/apparmor.txt b/joal/apparmor.txt index 8bfb181c4..abd827113 100644 --- a/joal/apparmor.txt +++ b/joal/apparmor.txt @@ -21,6 +21,12 @@ profile joal_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/joplin/apparmor.txt b/joplin/apparmor.txt index a3aa20e1f..e5cc781d5 100644 --- a/joplin/apparmor.txt +++ b/joplin/apparmor.txt @@ -25,6 +25,12 @@ profile joplin flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/lidarr/apparmor.txt b/lidarr/apparmor.txt index e85371433..dd25049af 100644 --- a/lidarr/apparmor.txt +++ b/lidarr/apparmor.txt @@ -25,6 +25,12 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/mealie/apparmor.txt b/mealie/apparmor.txt index 6926ca0b0..f717e3a8e 100644 --- a/mealie/apparmor.txt +++ b/mealie/apparmor.txt @@ -21,6 +21,12 @@ profile mealie_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/mylar3/apparmor.txt b/mylar3/apparmor.txt index 3047d0ae1..2bfc9f640 100644 --- a/mylar3/apparmor.txt +++ b/mylar3/apparmor.txt @@ -25,6 +25,12 @@ profile mylar3_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/nextcloud/apparmor.txt b/nextcloud/apparmor.txt index 54f13dd9d..cd914dbf7 100644 --- a/nextcloud/apparmor.txt +++ b/nextcloud/apparmor.txt @@ -25,6 +25,12 @@ profile nextcloud_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/nzbget/apparmor.txt b/nzbget/apparmor.txt index b6c97dae8..93a01c1ee 100644 --- a/nzbget/apparmor.txt +++ b/nzbget/apparmor.txt @@ -25,6 +25,12 @@ profile nzbget_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/omada/apparmor.txt b/omada/apparmor.txt index 536f95002..25fcdb648 100644 --- a/omada/apparmor.txt +++ b/omada/apparmor.txt @@ -25,6 +25,12 @@ profile omada_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/ombi/apparmor.txt b/ombi/apparmor.txt index 12c51d088..7fb4c121a 100644 --- a/ombi/apparmor.txt +++ b/ombi/apparmor.txt @@ -25,6 +25,12 @@ profile ombi_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/organizr/apparmor.txt b/organizr/apparmor.txt index ec86101bb..d8b25aa17 100644 --- a/organizr/apparmor.txt +++ b/organizr/apparmor.txt @@ -22,6 +22,12 @@ profile organizr_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/overseerr/apparmor.txt b/overseerr/apparmor.txt index 32a469d1c..4dc02ce8c 100644 --- a/overseerr/apparmor.txt +++ b/overseerr/apparmor.txt @@ -25,6 +25,12 @@ profile overseerr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/paperless_ngx/apparmor.txt b/paperless_ngx/apparmor.txt index f43ff2009..dc26148d1 100644 --- a/paperless_ngx/apparmor.txt +++ b/paperless_ngx/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_paperless_ngx flags=(attach_disconnected,mediate_deleted) # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/papermerge/apparmor.txt b/papermerge/apparmor.txt index 4fc91511b..dea981ced 100644 --- a/papermerge/apparmor.txt +++ b/papermerge/apparmor.txt @@ -25,6 +25,12 @@ profile papermerge_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/photoprism/apparmor.txt b/photoprism/apparmor.txt index cb17dfeb0..d0e3bbd4b 100644 --- a/photoprism/apparmor.txt +++ b/photoprism/apparmor.txt @@ -25,6 +25,12 @@ profile photoprism flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/piwigo/apparmor.txt b/piwigo/apparmor.txt index 8cd98e562..8c5eaf6ae 100644 --- a/piwigo/apparmor.txt +++ b/piwigo/apparmor.txt @@ -25,6 +25,12 @@ profile piwigo_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/plex/apparmor.txt b/plex/apparmor.txt index a8450aa01..cffd84355 100644 --- a/plex/apparmor.txt +++ b/plex/apparmor.txt @@ -25,6 +25,12 @@ profile addon_db21ed7f_plex_nas flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/plex_meta_manager/apparmor.txt b/plex_meta_manager/apparmor.txt index 0ce1f85fb..8807a9a3b 100644 --- a/plex_meta_manager/apparmor.txt +++ b/plex_meta_manager/apparmor.txt @@ -25,6 +25,12 @@ profile plex-meta-manager_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/portainer/apparmor.txt b/portainer/apparmor.txt index d94bd8ca7..01decb75d 100644 --- a/portainer/apparmor.txt +++ b/portainer/apparmor.txt @@ -21,6 +21,12 @@ profile portainer_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/prowlarr/apparmor.txt b/prowlarr/apparmor.txt index a029cd032..52416745f 100644 --- a/prowlarr/apparmor.txt +++ b/prowlarr/apparmor.txt @@ -25,6 +25,12 @@ profile prowlarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/qbittorrent/apparmor.txt b/qbittorrent/apparmor.txt index 51682a1d2..34e94584d 100644 --- a/qbittorrent/apparmor.txt +++ b/qbittorrent/apparmor.txt @@ -29,6 +29,12 @@ profile db21ed7f_qbittorrent flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/radarr/apparmor.txt b/radarr/apparmor.txt index e85371433..dd25049af 100644 --- a/radarr/apparmor.txt +++ b/radarr/apparmor.txt @@ -25,6 +25,12 @@ profile radarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/readarr/apparmor.txt b/readarr/apparmor.txt index 32f913cf2..d4eb89759 100644 --- a/readarr/apparmor.txt +++ b/readarr/apparmor.txt @@ -25,6 +25,12 @@ profile readarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/requestrr/apparmor.txt b/requestrr/apparmor.txt index 6b6435dfc..76c3720a3 100644 --- a/requestrr/apparmor.txt +++ b/requestrr/apparmor.txt @@ -25,6 +25,12 @@ profile requestrr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/resiliosync/apparmor.txt b/resiliosync/apparmor.txt index 11f4e5e61..26d2caf9b 100644 --- a/resiliosync/apparmor.txt +++ b/resiliosync/apparmor.txt @@ -25,6 +25,12 @@ profile resiliosync_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/scrutiny/apparmor.txt b/scrutiny/apparmor.txt index 08a51a81f..3f2c7618c 100644 --- a/scrutiny/apparmor.txt +++ b/scrutiny/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/scrutiny_fa/apparmor.txt b/scrutiny_fa/apparmor.txt index 08a51a81f..3f2c7618c 100644 --- a/scrutiny_fa/apparmor.txt +++ b/scrutiny_fa/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_scrutiny flags=(attach_disconnected,mediate_deleted) { capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/seafile/apparmor.txt b/seafile/apparmor.txt index 646f6c57b..db9ecac1f 100644 --- a/seafile/apparmor.txt +++ b/seafile/apparmor.txt @@ -25,6 +25,12 @@ profile seafile_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/sonarr/apparmor.txt b/sonarr/apparmor.txt index e73eb0ce4..4e324a97a 100644 --- a/sonarr/apparmor.txt +++ b/sonarr/apparmor.txt @@ -25,6 +25,12 @@ profile sonarr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/spotweb/apparmor.txt b/spotweb/apparmor.txt index 1b34b8e9f..326b2ab5f 100644 --- a/spotweb/apparmor.txt +++ b/spotweb/apparmor.txt @@ -21,6 +21,12 @@ profile spotweb_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/tandoor_recipes/apparmor.txt b/tandoor_recipes/apparmor.txt index 19685785f..4537ab8c4 100644 --- a/tandoor_recipes/apparmor.txt +++ b/tandoor_recipes/apparmor.txt @@ -21,6 +21,12 @@ profile tandoor_recipes_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/tdarr/apparmor.txt b/tdarr/apparmor.txt index 78c5be80d..997afd104 100644 --- a/tdarr/apparmor.txt +++ b/tdarr/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_tdarr flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/teamspeak/apparmor.txt b/teamspeak/apparmor.txt index d96fe9af7..1f67369ee 100644 --- a/teamspeak/apparmor.txt +++ b/teamspeak/apparmor.txt @@ -21,6 +21,12 @@ profile teamspeak_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/transmission/apparmor.txt b/transmission/apparmor.txt index 6fe522169..26bddcd09 100644 --- a/transmission/apparmor.txt +++ b/transmission/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_transmission flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/transmission_openvpn/apparmor.txt b/transmission_openvpn/apparmor.txt index eed8d0d3e..401f9b934 100644 --- a/transmission_openvpn/apparmor.txt +++ b/transmission_openvpn/apparmor.txt @@ -25,6 +25,12 @@ profile db21ed7f_transmission_openvpn flags=(attach_disconnected,mediate_deleted # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/ubooquity/apparmor.txt b/ubooquity/apparmor.txt index 65b053c4c..b8b0e6228 100644 --- a/ubooquity/apparmor.txt +++ b/ubooquity/apparmor.txt @@ -25,6 +25,12 @@ profile ubooquity_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/unpackerr/apparmor.txt b/unpackerr/apparmor.txt index e197323b9..4a9a5e2d1 100644 --- a/unpackerr/apparmor.txt +++ b/unpackerr/apparmor.txt @@ -25,6 +25,12 @@ profile unpackerr_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/webtop_kde/apparmor.txt b/webtop_kde/apparmor.txt index d04322a78..534df6975 100644 --- a/webtop_kde/apparmor.txt +++ b/webtop_kde/apparmor.txt @@ -25,6 +25,12 @@ profile webtop_kde_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/webtrees/apparmor.txt b/webtrees/apparmor.txt index e2bd5a472..ad9932674 100644 --- a/webtrees/apparmor.txt +++ b/webtrees/apparmor.txt @@ -21,6 +21,12 @@ profile webtrees_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/wger/apparmor.txt b/wger/apparmor.txt index c4fd69840..10fbc0949 100644 --- a/wger/apparmor.txt +++ b/wger/apparmor.txt @@ -21,6 +21,12 @@ profile wger_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/whoogle/apparmor.txt b/whoogle/apparmor.txt index 8fb81ea80..9bea0dd84 100644 --- a/whoogle/apparmor.txt +++ b/whoogle/apparmor.txt @@ -25,6 +25,12 @@ profile whoogle-search_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/xteve/apparmor.txt b/xteve/apparmor.txt index 9abe422a1..c44f12614 100644 --- a/xteve/apparmor.txt +++ b/xteve/apparmor.txt @@ -21,6 +21,12 @@ profile xteve_addon flags=(attach_disconnected,mediate_deleted) { # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix, diff --git a/zoneminder/apparmor.txt b/zoneminder/apparmor.txt index 34d6c765f..c326f77ab 100644 --- a/zoneminder/apparmor.txt +++ b/zoneminder/apparmor.txt @@ -25,6 +25,12 @@ profile zoneminder_addon flags=(attach_disconnected,mediate_deleted) { # capability sys_rawio, # S6-Overlay + /init ix, + /run/{s6,s6-rc*,service}/** ix, + /package/** ix, + /command/** ix,, + /run/{,**} rwk, + /dev/tty rw, /bin/** ix, /usr/bin/** ix, /usr/lib/bashio/** ix,