felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(snap): do not confine snap.

Browse source 
Curently ignored because of some incompatibilities with snap-confine.

snap-confine is more important to confine than snap itself.
This commit is contained in:
Alexandre Pujol 2023-09-10 12:07:35 +01:00
parent aaed7a25da
commit 3147f7d59a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 12 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-s-z/sudo
View file

@ -56,7 +56,7 @@ profile sudo @{exec_path} {
@{lib}/** rPUx,
@{lib}/sudo/** mr,
/snap/snapd/@{int}/usr/bin/snap rPx,
/snap/snapd/@{int}@{bin}/snap rPUx,
@{etc_ro}/environment r,
@{etc_ro}/security/limits.d/{,*} r,