Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
apparmor profile for 0ad
#include <tunables/global>
/usr/games/pyrogenesis {
#include <abstractions/audio>
#include <abstractions/base>
#include <abstractions/dbus-session-strict>
#include <abstractions/freedesktop.org>
#include <abstractions/nameservice>
#include <abstractions/nvidia>
#include <abstractions/wayland>
#include <abstractions/X>
network inet,
network inet6,
/usr/bin/xdg-open rPUx, # to open web links from within the game
/usr/bin/xmessage rPUx, # to show crash messages
/usr/games/pyrogenesis mr,
/usr/share/games/0ad/** r,
owner @{HOME}/.cache/0ad/ rw,
owner @{HOME}/.cache/0ad/** rw,
owner @{HOME}/.config/0ad/ rw,
owner @{HOME}/.config/0ad/** rw,
owner @{HOME}/.local/share/0ad/ rw,
owner @{HOME}/.local/share/0ad/** rw,
owner @{HOME}/.cache/mesa/** rw,
owner @{HOME}/.cache/mesa_shader_cache/** rw,
/dev/dri/ r,
/sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r,
# Everything below is to make atlas working.
# Only enable if you're aware of the consequences!
# #include <abstractions/gnome>
# owner /dev/shm/* rwl,
# /etc/fstab r,
# owner @{HOME} r,
# owner @{HOME}/** r,
# owner @{PROC}/@{pid}/mountinfo r,
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.