From 0483f476ed72c35993313a7edd4a9f3d2ddb9239 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sat, 21 Jun 2025 19:56:54 +0200
Subject: [PATCH] fix(profile): aa-enforce: ensure looking path in sbin is
 allowed.

---
 apparmor.d/groups/apparmor/aa-enforce | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apparmor.d/groups/apparmor/aa-enforce b/apparmor.d/groups/apparmor/aa-enforce
index fcf7dc724..1743fd9d0 100644
--- a/apparmor.d/groups/apparmor/aa-enforce
+++ b/apparmor.d/groups/apparmor/aa-enforce
@@ -16,7 +16,7 @@ profile aa-enforce @{exec_path} {
 
   @{exec_path} mr,
 
-  @{bin}/ r,
+  @{sbin}/ r,
   @{sbin}/apparmor_parser    rPx,
 
   /usr/share/terminfo/** r,