From 4aa07796aec889cc2230b5e3e882fc68c566d35e Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 25 May 2025 01:39:00 +0200
Subject: [PATCH] feat(profile): cron: cleanup direct exec.

---
 apparmor.d/groups/cron/cron | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/apparmor.d/groups/cron/cron b/apparmor.d/groups/cron/cron
index c92441568..778dd2be8 100644
--- a/apparmor.d/groups/cron/cron
+++ b/apparmor.d/groups/cron/cron
@@ -38,9 +38,7 @@ profile cron @{exec_path} flags=(attach_disconnected) {
   @{bin}/run-parts   rCx -> run-parts, # could even be rix, as long as we are not
                                        # using the  run-parts profile we are good
 
-  @{lib}/@{multiarch}/e2fsprogs/e2scrub_all_cron rPUx,
-  @{lib}/sysstat/debian-sa1       rPUx,
-  /usr/share/rsync/scripts/rrsync      rPUx,
+  @{lib}/sysstat/debian-sa1            rPx,
 
   /etc/cron.d/{,*} r,
   /etc/crontab r,