apparmor: Allow using tesseract

Allow the worker to call tesseract and also access its data.
asdil12 · Aug 24, 2023 · 8d46fdf · 8d46fdf
1 parent 62b015d
commit 8d46fdf
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/profiles/apparmor.d/usr.share.openqa.script.worker b/profiles/apparmor.d/usr.share.openqa.script.worker
@@ -113,6 +113,7 @@
   /usr/bin/ssh-keygen rix,
   /usr/bin/tail rix,
   /usr/bin/tee rix,
+  /usr/bin/tesseract rix,
   /usr/bin/uname rix,
   /usr/bin/unixcmd rix,
   /usr/bin/unxz rix,
@@ -140,6 +141,7 @@
   /usr/share/openqa/script/worker r,
   /usr/share/git-core/templates/ r,
   /usr/share/git-core/templates/** r,
+  /usr/share/tessdata/* r,
   /usr/share/qemu/* rk,
   /usr/share/seabios/* r,
   /usr/share/qemu/keymaps/* r,