feat: Add apparmor profile

Author: crypto-universe

Cargo.toml

@@ -28,6 +28,7 @@ assets = [
     ["README.md", "/usr/share/doc/tox-node/README", "644"],
     ["dpkg/tox-node.service", "/lib/systemd/system/", "644"],
     ["dpkg/config.yml", "/etc/tox-node/", "644"],
+    ["dpkg/usr.bin.tox-node", "/etc/apparmor.d/", "644"],
 ]
 conf-files = ["/etc/tox-node/config.yml"]
 maintainer-scripts = "dpkg/info"

dpkg/usr.bin.tox-node

@@ -0,0 +1,15 @@
+#include <tunables/global>
+
+/usr/bin/tox-node {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+
+  /etc/tox-node/config.yml r,
+  /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r,
+  /usr/bin/tox-node mr,
+  /var/lib/tox-node/keys r,
+  owner /proc/*/cgroup r,
+  owner /proc/*/mountinfo r,
+
+}
+