1  # SPDX-License-Identifier: CC-PDM-1.0
 2  # Originally sourced from: https://github.com/i2p/i2p.i2p/blob/master/debian/apparmor/system_i2p
 3  # AppArmor profile for i2prouter
 4  
 5  # Last Modified: Sun Dec 06 12:30:32 2015
 6  # vim:syntax=apparmor et
 7  #include <tunables/global>
 8  
 9  profile system_i2p flags=(complain) {
10    #include <abstractions/i2p>
11  
12    #
13    #  Additional rules required when running as a service.
14    #
15  
16    owner /{,lib/live/mount/overlay/}var/lib/i2p/** rwk,
17    owner /{,lib/live/mount/overlay/}var/lib/i2p/i2p-config/eepsite/cgi-bin rix,
18    owner /{,lib/live/mount/overlay/}var/log/i2p/* rw,
19  
20    owner /{,var/}run/i2p/{i2p,routerjvm}.pid rw,
21    owner /{,var/}run/i2p/router.ping rw,
22  
23    # Site-specific additions and overrides. See local/README for details.
24    #include <local/system_i2p>
25  }