Files
addons/dnsmasq/apparmor.txt
Franck Nijhof fc839e76c7 dnsmasq: Refactor (#591)
* dnsmasq: Rewrite add-on onto Bashio

* dnsmasq: Removes debug statement from run.sh

* dnsmasq: Formats config.json

* dnsmasq: Adds README to add-on repository

* dnsmasq: Bumps version to 1.3, updates CHANGELOG
2019-06-02 13:34:59 +02:00

31 lines
579 B
Plaintext

#include <tunables/global>
profile dnsmasq flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
#include <abstractions/nameservice>
capability net_bind_service,
capability setgid,
capability setuid,
capability dac_override,
network inet raw,
network inet6 raw,
/bin/busybox ix,
/bin/bash ix,
/usr/bin/jq ix,
/usr/sbin/dnsmasq ix,
/etc/dnsmasq.conf rw,
/{,var/}run/*dnsmasq*.pid w,
/{,var/}run/dnsmasq/ r,
/{,var/}run/dnsmasq/* rw,
/usr/lib/bashio/bashio ix,
/dev/tty rw,
/tmp/* rw,
/run.sh rix,
/data/** r,
}