mirror of
https://github.com/alexbelgium/hassio-addons.git
synced 2026-09-01 17:53:32 +02:00
dbd74e0391
* full commit obsidian * updates on readme and clarification for addons community for easy tag on issues * becouse of https://github.com/alexbelgium/hassio-addons/issues/2966 * restore build.yaml for obsidian addons --------- Co-authored-by: ToledoEM <8144940+ToledoEM@users.noreply.github.com>
25 lines
660 B
Plaintext
25 lines
660 B
Plaintext
#include <tunables/global>
|
|
|
|
profile hassio-addons/obsidian_syncserver_solo flags=(attach_disconnected,mediate_deleted) {
|
|
#include <abstractions/base>
|
|
#include <abstractions/bash>
|
|
#include <abstractions/nameservice>
|
|
#include <abstractions/openssl>
|
|
|
|
# Baseline profile for CouchDB in HAOS. CouchDB runs on the Erlang VM,
|
|
# which needs broad file and network access plus the ability to drop
|
|
# privileges to the couchdb user.
|
|
file,
|
|
network,
|
|
|
|
capability chown,
|
|
capability dac_override,
|
|
capability fowner,
|
|
capability setgid,
|
|
capability setuid,
|
|
|
|
deny /proc/kcore rwklx,
|
|
deny /proc/sysrq-trigger rwklx,
|
|
deny /sys/firmware/** rwklx,
|
|
}
|