diff --git a/apparmor.d/groups/systemd/journalctl b/apparmor.d/groups/systemd/journalctl index bc061cfe5..ef62e37cd 100644 --- a/apparmor.d/groups/systemd/journalctl +++ b/apparmor.d/groups/systemd/journalctl @@ -22,6 +22,7 @@ profile journalctl @{exec_path} flags=(attach_disconnected) { network netlink raw, + signal receive set=kill peer=snapd, signal receive set=term peer=cockpit-bridge, signal send peer=child-pager, diff --git a/tests/integration/common.bash b/tests/integration/common.bash index ed167d4f9..7a012191b 100644 --- a/tests/integration/common.bash +++ b/tests/integration/common.bash @@ -9,7 +9,7 @@ load "$BATS_LIB_PATH/bats-support/load" export SYSTEMD_PAGER= # Ignore the profile not managed by apparmor.d -IGNORE=(php-fpm snapd/snap-confine) +IGNORE=(php-fpm snapd/snap-confine snap.vault.vaultd) # User password for sudo commands export PASSWORD=${PASSWORD:-user}