hostapd/apparmor-usr.sbin.hostapd

32 lines
506 B
Plaintext

abi <abi/3.0>,
#include <tunables/global>
profile hostapd /usr/sbin/hostapd {
#include <abstractions/base>
#include <abstractions/nameservice>
capability net_admin,
capability net_raw,
network packet,
network raw,
# for RADIUS
network inet dgram,
network inet6 dgram,
# grant read access to config files
/etc/hostapd.* r,
/etc/libnl/classid r,
#/proc/*/net/psched r,
# grant access to RFKILL control device
/dev/rfkill rw,
/run/hostapd/ rw,
/run/hostapd/* rw,
}