Add AppArmor file; SYS_RAWIO permission

This commit is contained in:
Fredrik Baberg 2023-01-12 22:15:06 +01:00
parent bc07b57c33
commit de6a5e1916
2 changed files with 36 additions and 4 deletions

View File

@ -0,0 +1,29 @@
#include <tunables/global>
profile 3DPrinter-OctoPrint flags=(attach_disconnected,mediate_deleted,complain) {
#include <abstractions/base>
# Capabilities
file,
signal (send) set=(kill,term,int,hup,cont),
# S6-Overlay
/init ix,
/bin/** ix,
/usr/bin/** ix,
/run/{s6,s6-rc*,service}/** ix,
/package/** ix,
/command/** ix,
/etc/services.d/** rwix,
/etc/cont-init.d/** rwix,
/etc/cont-finish.d/** rwix,
/run/{,**} rwk,
/dev/tty rw,
# Bashio
/usr/lib/bashio/** ix,
/tmp/** rwk,
# Access to options.json and other files within your addon
/data/** rw,
}

View File

@ -1,5 +1,5 @@
name: "3DPrinter-OctoPrint"
version: "2023.01.0"
version: "2023.01.01"
slug: "3dprinter-octoprint"
description: "OctoPrint as an addon, no additional bells and whistles."
arch:
@ -13,9 +13,12 @@ ports:
5000/tcp: null
ports_description:
5000/tcp: Web-based interface
# devices:
apparmor: false
# map:
# devices:
# - /dev/mem
# - /dev/gpiomem
privileged:
- SYS_RAWIO
apparmor: true
gpio: true
usb: true
uart: true