* add and install apparmor profiles

  - d/rules install AppArmor profiles
  - d/control add dh-apparmor build-dep
  - d/usr.lib.ipsec.{charon, lookip, stroke} add latest AppArmor profiles
    for charon, lookip and stroke

Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>

1 files changed, 28 insertions, 0 deletions

diff --git a/debian/usr.lib.ipsec.stroke b/debian/usr.lib.ipsec.stroke
new file mode 100644
index 000000000..9d20ee7c9
--- /dev/null
+++ b/debian/usr.lib.ipsec.stroke
@@ -0,0 +1,28 @@
+# ------------------------------------------------------------------
+#
+#   Copyright (C) 2014 Canonical Ltd.
+#
+#   This program is free software; you can redistribute it and/or
+#   modify it under the terms of version 2 of the GNU General Public
+#   License published by the Free Software Foundation.
+#
+#   Author: Jonathan Davies <jonathan.davies@canonical.com>
+#
+# ------------------------------------------------------------------
+
+#include <tunables/global>
+
+/usr/lib/ipsec/stroke flags=(attach_disconnected) {
+  #include <abstractions/base>
+
+  capability dac_override,
+
+  /etc/strongswan.conf          r,
+  /etc/strongswan.d/            r,
+  /etc/strongswan.d/**          r,
+
+  /run/charon.ctl               rw,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.lib.ipsec.stroke>
+}