Skip to content

Instantly share code, notes, and snippets.

@vitzli
Created October 5, 2015 16:46
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save vitzli/ed63308a6bddf259d6f8 to your computer and use it in GitHub Desktop.
Save vitzli/ed63308a6bddf259d6f8 to your computer and use it in GitHub Desktop.
Simple apparmor profile for IPFS
#include <tunables/global>
/usr/local/bin/ipfs {
#include <abstractions/base>
/dev/tty r,
/home/*/.ipfs/** rwk,
/proc/sys/kernel/hostname r,
/proc/sys/net/core/somaxconn r,
/usr/local/bin/ipfs mr,
/home/*/download/ rw,
/home/*/download/** rw,
/srv/repos/ r,
/srv/repos/** r,
/srv/torrent/ r,
/srv/torrent/** r,
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment