Merge pull request #589 from l-n-s/apparmor

Add AppArmor profile

contrib/apparmor/usr.bin.lokinet

@@ -0,0 +1,24 @@
+# Last Modified: Sat May  4 18:48:24 2019
+#include <tunables/global>
+
+/usr/bin/lokinet {
+  #include <abstractions/base>
+
+  capability net_admin,
+  capability net_bind_service,
+
+  network inet dgram,
+  network inet6 dgram,
+  network netlink raw,
+
+  /dev/net/tun rw,
+  /lib/@{multiarch}/ld-*.so mr,
+  /usr/bin/lokinet mr,
+
+  owner /var/lib/lokinet/ rw,
+  owner /var/lib/lokinet/** rwk,
+
+  owner @{HOME}/.lokinet/ rw,
+  owner @{HOME}/.lokinet/** rwk,
+
+}