feat(snap): do not confine snap.

Curently ignored because of some incompatibilities with snap-confine. snap-confine is more important to confine than snap itself.
2023-09-10 12:07:35 +01:00 · 2023-09-10 12:07:35 +01:00 · 3147f7d59a
commit 3147f7d59a
parent aaed7a25da
10 changed files with 12 additions and 13 deletions
--- a/apparmor.d/groups/systemd/systemd-udevd
+++ b/apparmor.d/groups/systemd/systemd-udevd
@ -55,7 +55,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
  @{bin}/sed               rix,
  @{bin}/setfacl           rix,
  @{bin}/sg_inq            rix,
-  @{bin}/snap              rPx,
+  @{bin}/snap             rPUx,
  @{bin}/systemctl         rCx -> systemctl,
  @{bin}/touch             rix,
  @{bin}/unshare           rix,