This commit is contained in:
Hans Karlinius
2024-12-08 05:53:21 +01:00
parent 7961850953
commit 193260d57d
3 changed files with 13 additions and 10 deletions

View File

@@ -1,6 +1,6 @@
# Home Assistant Add-on: VirtualHere Client
Installs VirtualHere Client with addon configuration or manual handle configuration.
Installs VirtualHere Client with configuration handled by addon or manually.
## About

View File

@@ -28,9 +28,9 @@ profile example flags=(attach_disconnected,mediate_deleted) {
/data/** rw,
# Start new profile for service
/usr/bin/my_program cx -> my_program,
/usr/bin/vhclient cx -> vhclient,
profile my_program flags=(attach_disconnected,mediate_deleted) {
profile vhclient flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
# Receive signals from S6-Overlay
@@ -42,16 +42,17 @@ profile example flags=(attach_disconnected,mediate_deleted) {
# Access to mapped volumes specified in config.json
/share/** rw,
complain,
# Access required for service functionality
# Note: List was built by doing the following:
# 1. Add what is obviously needed based on what is in the script
# 2. Add `complain` as a flag to this profile temporarily and run the addon
# 3. Review the audit log with `journalctl _TRANSPORT="audit" -g 'apparmor="ALLOWED"'` and add other access as needed
# Remember to remove the `complain` flag when you are done
/usr/bin/my_program r,
/bin/bash rix,
/bin/echo ix,
/etc/passwd r,
/dev/tty rw,
/usr/bin/vhclient r,
#/bin/bash rix,
#/bin/echo ix,
#/etc/passwd r,
#/dev/tty rw,
}
}

View File

@@ -1,5 +1,5 @@
name: VirtualHere Client
version: "0.1.404"
version: "0.1.405"
slug: vhclient
description: VirtualHere Client
arch:
@@ -14,12 +14,14 @@ host_network: true
hassio_api: true
homeassistant_api: true
privileged:
- SYS_ADMIN
- SYS_RAWIO
# - SYS_ADMIN
apparmor: false
map:
- type: homeassistant_config
read_only: false
path: /config
udev: true
usb: true
kernel_modules: true
options: