Hassio-Access-Point icon indicating copy to clipboard operation
Hassio-Access-Point copied to clipboard

Feature Request & Implementation: Add AppArmor support for supervised docker installation

Open MariusHerget opened this issue 2 years ago • 0 comments

Hey,

I tried to install your add-on in a supervised docker installation, and apparmor denied me access to the dbus. I already had a similar issue with two other add-ons #1 #2 and tried to create an appropriate profile.

Please be advised that I am still determining whether I gave too much access.

Steps:

  1. Add apparmor: true to config.yaml
  2. Copy the attached file apparmor.txt next to config.yaml in the main folder.

apparmor.txt

I also recognized, that iptables-nft did not work in my docker until I modified the Dockerfile and installed iptables as well:

Dockerfile.txt

Thanks in advance! (Tested with version 4.5 on supervised Hassio install, Ubuntu 22.04, 64bit)

Tested config:

ssid: test
wpa_passphrase: test1234
channel: "6"
address: 192.168.99.1
netmask: 255.255.255.0
broadcast: 192.168.99.255
interface: wifi-ext-tp
eth_interface: wifi-int
hide_ssid: "0"
dhcp: "1"
dhcp_start_addr: 192.168.99.10
dhcp_end_addr: 192.168.99.20
allow_mac_addresses: []
deny_mac_addresses: []
debug: 1
hostapd_config_override: []
client_internet_access: "1"
client_dns_override: []
dnsmasq_config_override: []

MariusHerget avatar Jun 12 '23 16:06 MariusHerget