test
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
|||||||
# Home Assistant Add-on: VirtualHere Client
|
# Home Assistant Add-on: VirtualHere Client
|
||||||
|
|
||||||
Installs VirtualHere Client with addon configuration or manual handle configuration.
|
Installs VirtualHere Client with configuration handled by addon or manually.
|
||||||
|
|
||||||
## About
|
## About
|
||||||
|
|
||||||
|
|||||||
@@ -28,9 +28,9 @@ profile example flags=(attach_disconnected,mediate_deleted) {
|
|||||||
/data/** rw,
|
/data/** rw,
|
||||||
|
|
||||||
# Start new profile for service
|
# Start new profile for service
|
||||||
/usr/bin/my_program cx -> my_program,
|
/usr/bin/vhclient cx -> vhclient,
|
||||||
|
|
||||||
profile my_program flags=(attach_disconnected,mediate_deleted) {
|
profile vhclient flags=(attach_disconnected,mediate_deleted) {
|
||||||
#include <abstractions/base>
|
#include <abstractions/base>
|
||||||
|
|
||||||
# Receive signals from S6-Overlay
|
# Receive signals from S6-Overlay
|
||||||
@@ -42,16 +42,17 @@ profile example flags=(attach_disconnected,mediate_deleted) {
|
|||||||
# Access to mapped volumes specified in config.json
|
# Access to mapped volumes specified in config.json
|
||||||
/share/** rw,
|
/share/** rw,
|
||||||
|
|
||||||
|
complain,
|
||||||
# Access required for service functionality
|
# Access required for service functionality
|
||||||
# Note: List was built by doing the following:
|
# Note: List was built by doing the following:
|
||||||
# 1. Add what is obviously needed based on what is in the script
|
# 1. Add what is obviously needed based on what is in the script
|
||||||
# 2. Add `complain` as a flag to this profile temporarily and run the addon
|
# 2. Add `complain` as a flag to this profile temporarily and run the addon
|
||||||
# 3. Review the audit log with `journalctl _TRANSPORT="audit" -g 'apparmor="ALLOWED"'` and add other access as needed
|
# 3. Review the audit log with `journalctl _TRANSPORT="audit" -g 'apparmor="ALLOWED"'` and add other access as needed
|
||||||
# Remember to remove the `complain` flag when you are done
|
# Remember to remove the `complain` flag when you are done
|
||||||
/usr/bin/my_program r,
|
/usr/bin/vhclient r,
|
||||||
/bin/bash rix,
|
#/bin/bash rix,
|
||||||
/bin/echo ix,
|
#/bin/echo ix,
|
||||||
/etc/passwd r,
|
#/etc/passwd r,
|
||||||
/dev/tty rw,
|
#/dev/tty rw,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -1,5 +1,5 @@
|
|||||||
name: VirtualHere Client
|
name: VirtualHere Client
|
||||||
version: "0.1.404"
|
version: "0.1.405"
|
||||||
slug: vhclient
|
slug: vhclient
|
||||||
description: VirtualHere Client
|
description: VirtualHere Client
|
||||||
arch:
|
arch:
|
||||||
@@ -14,12 +14,14 @@ host_network: true
|
|||||||
hassio_api: true
|
hassio_api: true
|
||||||
homeassistant_api: true
|
homeassistant_api: true
|
||||||
privileged:
|
privileged:
|
||||||
- SYS_ADMIN
|
- SYS_RAWIO
|
||||||
|
# - SYS_ADMIN
|
||||||
apparmor: false
|
apparmor: false
|
||||||
map:
|
map:
|
||||||
- type: homeassistant_config
|
- type: homeassistant_config
|
||||||
read_only: false
|
read_only: false
|
||||||
path: /config
|
path: /config
|
||||||
|
udev: true
|
||||||
usb: true
|
usb: true
|
||||||
kernel_modules: true
|
kernel_modules: true
|
||||||
options:
|
options:
|
||||||
|
|||||||
Reference in New Issue
Block a user