# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2026 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only

  /etc/ca-certificates.conf r,


  /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem r,

  /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt r,

  /etc/pki/ca-trust/extracted/pem/directory-hash/ r,

  /etc/pki/ca-trust/extracted/pem/directory-hash/*.pem r,


  /etc/pki/ca-trust/source/ r,

  /etc/pki/ca-trust/source/README r,

  /etc/pki/ca-trust/source/anchors/ r,

  /etc/pki/ca-trust/source/blocklist/ r,

  /usr/share/pki/ca-trust-source/ r,

  /usr/share/pki/ca-trust-source/README r,

  /usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit r,

  /usr/share/pki/ca-trust-source/anchors/ r,

  /usr/share/pki/ca-trust-source/blocklist/ r,

  /usr/share/pki/ca-trust-legacy/ca-bundle.legacy.default.crt r,


  /etc/crypto-policies/back-ends/gnutls.config r,

# vim:syntax=apparmor
