## Example global R policy profile.
## To active this profile, run: sudo aa-enforce usr.bin.r
## To disable enforcing, run: sudo aa-disable usr.bin.r
#include <tunables/global>
/usr/bin/R {
#include <abstractions/base>
#include <abstractions/nameservice>
capability kill,
capability net_bind_service,
capability sys_tty_config,
@{HOME}/ r,
@{HOME}/.Rprofile r,
@{HOME}/R/ r,
@{HOME}/R/** rw,
@{HOME}/R/{i686,x86_64}-pc-linux-gnu-library/** mrwix,
## we need this for aa_getcon()
@{PROC}/[0-9]*/attr/current r,
/bin/* rix,
/dev/tty r,
/etc/R/ r,
/etc/R/* r,
/etc/fonts/** mr,
/etc/resolv.conf r,
/etc/xml/* r,
/tmp/** mrwix,
/usr/bin/* rix,
/usr/include/** r,
/usr/lib/gcc/** rix,
/usr/lib/R/bin/* rix,
/usr/lib{,32,64}/** mr,
/usr/lib{,32,64}/R/bin/exec/R rix,
/usr/local/lib/R/** mr,
/usr/local/lib/R/site-library/** mrwix,
/usr/local/share/** mr,
/usr/share/** mr,
/usr/share/ca-certificates/** r,
}
Add the following code to your website.
For more information on customizing the embed code, read Embedding Snippets.