straper/db/public/apparmor/apparmor.d/abstractions/gnupg


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

# vim:syntax=apparmor
# gnupg sub-process running permissions

  abi <abi/4.0>,

  # user configurations
  owner @{HOME}/.gnupg/options     r,
  owner @{HOME}/.gnupg/pubring.gpg r,
  owner @{HOME}/.gnupg/pubring.kbx r,
  owner @{HOME}/.gnupg/random_seed rw,
  owner @{HOME}/.gnupg/secring.gpg r,
  owner @{HOME}/.gnupg/so/*.x86_64 mr,
  owner @{HOME}/.gnupg/trustdb.gpg rw,

  # Include additions to the abstraction
  include if exists <abstractions/gnupg.d>