Skip to content

Instantly share code, notes, and snippets.

@Dunedan
Last active June 12, 2024 10:13
Show Gist options
  • Save Dunedan/bd6187b9241d1a0e67b0a4b888cdf840 to your computer and use it in GitHub Desktop.
Save Dunedan/bd6187b9241d1a0e67b0a4b888cdf840 to your computer and use it in GitHub Desktop.
apparmor profile for 0ad
#include <tunables/global>
/usr/games/pyrogenesis {
#include <abstractions/audio>
#include <abstractions/base>
#include <abstractions/dbus-session-strict>
#include <abstractions/freedesktop.org>
#include <abstractions/nameservice>
#include <abstractions/nvidia>
#include <abstractions/wayland>
#include <abstractions/X>
network inet,
network inet6,
/usr/bin/xdg-open rPUx, # to open web links from within the game
/usr/bin/xmessage rPUx, # to show crash messages
/usr/games/pyrogenesis mr,
/usr/share/games/0ad/** r,
owner @{HOME}/.cache/0ad/ rw,
owner @{HOME}/.cache/0ad/** rw,
owner @{HOME}/.config/0ad/ rw,
owner @{HOME}/.config/0ad/** rw,
owner @{HOME}/.local/share/0ad/ rw,
owner @{HOME}/.local/share/0ad/** rw,
owner @{HOME}/.cache/mesa/** rw,
owner @{HOME}/.cache/mesa_shader_cache/** rwk,
/dev/dri/ r,
/sys/devices/pci[0-9:]*/**/{device,revision,subsystem_device,subsystem_vendor,uevent,vendor} r,
@{PROC}/@{pid}/stat r,
@{PROC}/@{pid}/task/@{pid}/{comm,stat} rw,
/usr/share/vulkan/** r,
# Everything below is to make atlas working.
# Only enable if you're aware of the consequences!
# #include <abstractions/gnome>
# owner /dev/shm/* rwl,
# /etc/fstab r,
# owner @{HOME} r,
# owner @{HOME}/** r,
# owner @{PROC}/@{pid}/mountinfo r,
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment