Add AppArmor file; SYS_RAWIO permission
This commit is contained in:
parent
bc07b57c33
commit
de6a5e1916
29
3dprinter-octoprint/apparmor.txt
Normal file
29
3dprinter-octoprint/apparmor.txt
Normal file
@ -0,0 +1,29 @@
|
|||||||
|
#include <tunables/global>
|
||||||
|
|
||||||
|
profile 3DPrinter-OctoPrint flags=(attach_disconnected,mediate_deleted,complain) {
|
||||||
|
#include <abstractions/base>
|
||||||
|
|
||||||
|
# Capabilities
|
||||||
|
file,
|
||||||
|
signal (send) set=(kill,term,int,hup,cont),
|
||||||
|
|
||||||
|
# S6-Overlay
|
||||||
|
/init ix,
|
||||||
|
/bin/** ix,
|
||||||
|
/usr/bin/** ix,
|
||||||
|
/run/{s6,s6-rc*,service}/** ix,
|
||||||
|
/package/** ix,
|
||||||
|
/command/** ix,
|
||||||
|
/etc/services.d/** rwix,
|
||||||
|
/etc/cont-init.d/** rwix,
|
||||||
|
/etc/cont-finish.d/** rwix,
|
||||||
|
/run/{,**} rwk,
|
||||||
|
/dev/tty rw,
|
||||||
|
|
||||||
|
# Bashio
|
||||||
|
/usr/lib/bashio/** ix,
|
||||||
|
/tmp/** rwk,
|
||||||
|
|
||||||
|
# Access to options.json and other files within your addon
|
||||||
|
/data/** rw,
|
||||||
|
}
|
||||||
@ -1,5 +1,5 @@
|
|||||||
name: "3DPrinter-OctoPrint"
|
name: "3DPrinter-OctoPrint"
|
||||||
version: "2023.01.0"
|
version: "2023.01.01"
|
||||||
slug: "3dprinter-octoprint"
|
slug: "3dprinter-octoprint"
|
||||||
description: "OctoPrint as an addon, no additional bells and whistles."
|
description: "OctoPrint as an addon, no additional bells and whistles."
|
||||||
arch:
|
arch:
|
||||||
@ -14,8 +14,11 @@ ports:
|
|||||||
ports_description:
|
ports_description:
|
||||||
5000/tcp: Web-based interface
|
5000/tcp: Web-based interface
|
||||||
# devices:
|
# devices:
|
||||||
apparmor: false
|
# - /dev/mem
|
||||||
# map:
|
# - /dev/gpiomem
|
||||||
|
privileged:
|
||||||
|
- SYS_RAWIO
|
||||||
|
apparmor: true
|
||||||
gpio: true
|
gpio: true
|
||||||
usb: true
|
usb: true
|
||||||
uart: true
|
uart: true
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user