File draupnir.apparmor of Package draupnir

# This AppArmor profile is part of the draupnir package
# Georg Pfuetzenreuter <mail+apparmor@georg-pfuetzenreuter.net>

#include <tunables/global>

profile draupnir flags=(attach_disconnected) {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/openssl>
  #include <abstractions/user-tmp>

  /usr/bin/node__NODE_VERSION__ ix,

  __SYSCONFDIR__/ r,
  __SYSCONFDIR__/{production,registration}.yaml r,
  __SYSCONFDIR__/token r,
  /proc/@{pid}/{cgroup,stat} r,
  __LIBDIR__/better-sqlite3/better_sqlite3.node m,
  __LIBEXECDIR__/matrix-sdk-crypto.linux-x64-gnu.node mr,
  __DATADIR__/** r,
  /usr/share/icu/[0-9][0-9].[0-9]/icudt[0-9][0-9]l.dat r,
  __HOMEDIR__/ r,
  __HOMEDIR__/bot.json rw,
  __HOMEDIR__/{hash-store,room-audit-log,room-state-backing-store,user-restriction-audit-log}.db{,-{journal,shm,wal}} krw,

}