Skip to content

Instantly share code, notes, and snippets.

@Fighter19
Last active June 20, 2023 14:08
Show Gist options
  • Save Fighter19/8f1d35dd233e85d69695e6bd31ca9dfb to your computer and use it in GitHub Desktop.
Save Fighter19/8f1d35dd233e85d69695e6bd31ca9dfb to your computer and use it in GitHub Desktop.
AppArmor rules for OpenJK / Jedi Knight: Jedi Academy on ARM64 (adjustments might be required)
# Last Modified: Fri Dec 13 20:41:06 2019
#include <tunables/global>
/usr/local/JediAcademy/openjkded.aarch64 {
#include <abstractions/base>
#include <abstractions/nameservice>
/lib/aarch64-linux-gnu/ld-*.so mr,
/usr/local/JediAcademy/base/ r,
/usr/local/JediAcademy/base/jampgameaarch64.so mr,
/usr/local/JediAcademy/openjkded.aarch64 mr,
owner /home/*/.local/share/openjk/base/maps/mp/* w,
owner /home/jedi/.local/share/openjk/*/ r,
owner /home/jedi/.local/share/openjk/base/* r,
owner /home/jedi/.local/share/openjk/base/*/ r,
owner /home/jedi/.local/share/openjk/base/games.log w,
owner /home/jedi/.local/share/openjk/base/openjk_server.cfg w,
owner /home/jedi/.local/share/openjk/base/security.log w,
owner /home/jedi/.local/share/openjk/base/strings/*/ r,
owner /home/jedi/.local/share/openjk/basejka/* rw,
}
@Fighter19
Copy link
Author

NOTE: In case this isn't clear already this is for ARM64 Linux machines (for example RPI3/RPI4)

@Fighter19
Copy link
Author

I noticed that this file is poorly found on search engines, therefore I'll explain a little further:
This file can be used in order to confine access to system resources on OpenJK servers.
OpenJK server can be used to host Jedi Knight: Jedi Academy servers.
OpenJK also provides a way to build Jedi Knight: Jedi Outcast binaries.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment