Add Wahay profile

usr/share/doc/onion-grater-merger/examples/40_wahay.yml

@@ -0,0 +1,20 @@
+# Copyright (C) 2019-2020 the Wahay contributors
+# License: GNU General Public License version 3
+---
+- apparmor-profiles:
+    - '/usr/bin/wahay'
+  users:
+    - 'amnesia'
+  commands:
+    ADD_ONION:
+      # TODO: Make Wahay restrict the local port range it listens on.
+      # Whonix will use 0.0.0.0; most other OS's will use 127.0.0.1.
+      - pattern:     'NEW:(\S+) Port=8181,(?:127.0.0.1|0.0.0.0):(\S+) Port=64738,(?:127.0.0.1|0.0.0.0):(\S+)'
+        replacement: 'NEW:{} Port=8181,{client-address}:{} Port=64738,{client-address}:{} Flags=DiscardPK'
+    DEL_ONION:
+      - '.+'
+    GETINFO:
+      - 'version'
+  events:
+    STREAM:
+  restrict-stream-events: false