From 47818a1a7c475c3c214e3b25d961b77d55069086 Mon Sep 17 00:00:00 2001
From: Sergey Alirzaev <zl29ah@gmail.com>
Date: Tue, 15 Apr 2025 18:17:52 +0200
Subject: [PATCH] apparmor: add yggdrasilctl policy (#1235)

---
 contrib/apparmor/usr.bin.yggdrasilctl | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 contrib/apparmor/usr.bin.yggdrasilctl

diff --git a/contrib/apparmor/usr.bin.yggdrasilctl b/contrib/apparmor/usr.bin.yggdrasilctl
new file mode 100644
index 00000000..2f2c8366
--- /dev/null
+++ b/contrib/apparmor/usr.bin.yggdrasilctl
@@ -0,0 +1,11 @@
+# Last Modified: Mon Feb  3 22:19:45 2025
+include <tunables/global>
+
+/usr/bin/yggdrasilctl {
+  include <abstractions/base>
+
+  /etc/yggdrasil.conf rw,
+  /run/yggdrasil.sock rw,
+  owner /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
+
+}