From ccdfba90de81eff3791158571d747b3da83aaf22 Mon Sep 17 00:00:00 2001
From: Sergey Alirzaev <l29ah@riseup.net>
Date: Wed, 26 Feb 2025 03:23:46 +0100
Subject: [PATCH] apparmor: add yggdrasilctl policy

---
 contrib/apparmor/usr.bin.yggdrasilctl | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 contrib/apparmor/usr.bin.yggdrasilctl

diff --git a/contrib/apparmor/usr.bin.yggdrasilctl b/contrib/apparmor/usr.bin.yggdrasilctl
new file mode 100644
index 00000000..2f2c8366
--- /dev/null
+++ b/contrib/apparmor/usr.bin.yggdrasilctl
@@ -0,0 +1,11 @@
+# Last Modified: Mon Feb  3 22:19:45 2025
+include <tunables/global>
+
+/usr/bin/yggdrasilctl {
+  include <abstractions/base>
+
+  /etc/yggdrasil.conf rw,
+  /run/yggdrasil.sock rw,
+  owner /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
+
+}