diff --git a/apparmor.d/profiles-a-f/fd b/apparmor.d/profiles-a-f/fd index da281c82d..1913ba7d5 100644 --- a/apparmor.d/profiles-a-f/fd +++ b/apparmor.d/profiles-a-f/fd @@ -10,11 +10,11 @@ include profile fd @{exec_path} { include + @{exec_path} mr, + ## Allow reading the entire filesystem to search for filenames /{,**} r, - @{exec_path} mr, - include if exists }