This commit is contained in:
Hans Karlinius
2024-12-08 05:53:21 +01:00
parent 7961850953
commit 193260d57d
3 changed files with 13 additions and 10 deletions
+1 -1
View File
@@ -1,6 +1,6 @@
# Home Assistant Add-on: VirtualHere Client # Home Assistant Add-on: VirtualHere Client
Installs VirtualHere Client with addon configuration or manual handle configuration. Installs VirtualHere Client with configuration handled by addon or manually.
## About ## About
+8 -7
View File
@@ -28,9 +28,9 @@ profile example flags=(attach_disconnected,mediate_deleted) {
/data/** rw, /data/** rw,
# Start new profile for service # Start new profile for service
/usr/bin/my_program cx -> my_program, /usr/bin/vhclient cx -> vhclient,
profile my_program flags=(attach_disconnected,mediate_deleted) { profile vhclient flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base> #include <abstractions/base>
# Receive signals from S6-Overlay # Receive signals from S6-Overlay
@@ -42,16 +42,17 @@ profile example flags=(attach_disconnected,mediate_deleted) {
# Access to mapped volumes specified in config.json # Access to mapped volumes specified in config.json
/share/** rw, /share/** rw,
complain,
# Access required for service functionality # Access required for service functionality
# Note: List was built by doing the following: # Note: List was built by doing the following:
# 1. Add what is obviously needed based on what is in the script # 1. Add what is obviously needed based on what is in the script
# 2. Add `complain` as a flag to this profile temporarily and run the addon # 2. Add `complain` as a flag to this profile temporarily and run the addon
# 3. Review the audit log with `journalctl _TRANSPORT="audit" -g 'apparmor="ALLOWED"'` and add other access as needed # 3. Review the audit log with `journalctl _TRANSPORT="audit" -g 'apparmor="ALLOWED"'` and add other access as needed
# Remember to remove the `complain` flag when you are done # Remember to remove the `complain` flag when you are done
/usr/bin/my_program r, /usr/bin/vhclient r,
/bin/bash rix, #/bin/bash rix,
/bin/echo ix, #/bin/echo ix,
/etc/passwd r, #/etc/passwd r,
/dev/tty rw, #/dev/tty rw,
} }
} }
+4 -2
View File
@@ -1,5 +1,5 @@
name: VirtualHere Client name: VirtualHere Client
version: "0.1.404" version: "0.1.405"
slug: vhclient slug: vhclient
description: VirtualHere Client description: VirtualHere Client
arch: arch:
@@ -14,12 +14,14 @@ host_network: true
hassio_api: true hassio_api: true
homeassistant_api: true homeassistant_api: true
privileged: privileged:
- SYS_ADMIN - SYS_RAWIO
# - SYS_ADMIN
apparmor: false apparmor: false
map: map:
- type: homeassistant_config - type: homeassistant_config
read_only: false read_only: false
path: /config path: /config
udev: true
usb: true usb: true
kernel_modules: true kernel_modules: true
options: options: