29 lines
949 B
Plaintext
29 lines
949 B
Plaintext
# idTech3 server AppArmor profile
|
|
# Copyright © 2016-2018 Simon McVittie
|
|
# Copying and distribution of this file, with or without modification, are
|
|
# permitted in any medium without royalty provided this notice is preserved.
|
|
# This file is offered as-is, without any warranty.
|
|
|
|
#include <tunables/global>
|
|
|
|
profile ioq3ded /usr/lib/ioquake3/ioq3ded flags=(complain) {
|
|
#include <abstractions/base>
|
|
#include <abstractions/nameservice>
|
|
#include <abstractions/private-files-strict>
|
|
|
|
network inet dgram,
|
|
network inet stream,
|
|
network inet6 dgram,
|
|
network inet6 stream,
|
|
|
|
/etc/{openarena,quake3}-server/** r,
|
|
/usr/lib/{ioquake3,quake3,openarena,openarena-server}/{,**} mr,
|
|
/usr/share/games/{quake3*,openarena}/{,**} r,
|
|
|
|
owner @{HOME}/.{openarena,q3a}/{,**} rwk,
|
|
owner /var/games/{openarena,quake3}-server/** rwk,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
#include <local/usr.lib.ioquake3.ioq3ded>
|
|
}
|