On Sun, Feb 15, 2026 at 12:24:51AM +0300, Oleg Broytman <[email protected]> wrote:
> Now I need to find out how to write (or fix existing) AA policy for
> user-run daemon.

I fixed my problems with the following local policy:

# ---------- file: /etc/apparmor.d/local/transmission ----------
# vim:syntax=apparmor
# LOGPROF-SUGGEST: no
# Author: Oleg Broytman <[email protected]>

  /usr/share/transmission/public_html/** r,

  owner @{HOME}/.cache/transmission*/    w,
  owner @{HOME}/.cache/transmission*/**  rw,
  owner @{HOME}/.config/transmission*/   w,
  owner @{HOME}/.config/transmission*/** rw,
  owner @{HOME}/Downloads/** rw,
# ---------- /file ----------

With it:

$ sudo apparmor_parser --replace /etc/apparmor.d/transmission

The file /etc/apparmor.d/local/transmission is automatically included in
/etc/apparmor.d/transmission .

Who is responsible for the file /etc/apparmor.d/transmission ? You or
Debian AppArmor maintainers? I want to report a bug (or may be 2) in it.

Oleg.
-- 
    Oleg Broytman            https://phdru.name/            [email protected]
           Programmers don't die, they just GOSUB without RETURN.

Reply via email to