From ea8cf72338b2eafb1b85fd2dd5dc0f2c76fdca57 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Istv=C3=A1n=20V=C3=A1radi?= Date: Mon, 16 Sep 2024 07:52:27 +0200 Subject: [PATCH] Added AppArmor profile --- debian/apparmor/nextcloud | 12 ++++++++++++ debian/control | 1 + debian/nextcloud-desktop.install | 1 + debian/rules | 4 ++++ 4 files changed, 18 insertions(+) create mode 100644 debian/apparmor/nextcloud diff --git a/debian/apparmor/nextcloud b/debian/apparmor/nextcloud new file mode 100644 index 0000000000..e941f7c47a --- /dev/null +++ b/debian/apparmor/nextcloud @@ -0,0 +1,12 @@ +# This profile allows everything and only exists to give the +# application a name instead of having the label "unconfined" + +abi , +include + +profile nextcloud /usr/bin/nextcloud flags=(unconfined) { + userns, + + # Site-specific additions and overrides. See local/README for details. + include if exists +} diff --git a/debian/control b/debian/control index 95b2db1a27..801a7adda1 100644 --- a/debian/control +++ b/debian/control @@ -7,6 +7,7 @@ Uploaders: Sandro Knauß , Build-Depends: appstream, cmake (>= 3.2~), debhelper-compat (= 12), + dh-apparmor, dh-python, doxygen, extra-cmake-modules (>= 1.2.0~), diff --git a/debian/nextcloud-desktop.install b/debian/nextcloud-desktop.install index 009c0a6996..d99f4e027d 100644 --- a/debian/nextcloud-desktop.install +++ b/debian/nextcloud-desktop.install @@ -2,3 +2,4 @@ usr/bin/nextcloud usr/share/applications/com.nextcloud.desktopclient.nextcloud.desktop usr/share/dbus-1/services/com.nextcloudgmbh.Nextcloud.service usr/share/mime/packages/nextcloud.xml +debian/apparmor/nextcloud etc/apparmor.d diff --git a/debian/rules b/debian/rules index 424ecbbff7..3038fc811d 100755 --- a/debian/rules +++ b/debian/rules @@ -47,3 +47,7 @@ override_dh_python3: dh_python3 -i -p nautilus-owncloud usr/share/nautilus-python/extensions dh_python3 -i -p nemo-owncloud usr/share/nemo-python/extensions dh_python3 -i -p caja-owncloud usr/share/caja-python/extensions + +override_dh_install: + dh_install + dh_apparmor --profile-name nextcloud