diff --git a/apparmor.d/profiles-m-r/rg b/apparmor.d/profiles-m-r/rg index d2638c904..856f1f532 100644 --- a/apparmor.d/profiles-m-r/rg +++ b/apparmor.d/profiles-m-r/rg @@ -10,11 +10,11 @@ include profile rg @{exec_path} { include + @{exec_path} mr, + ## Allow reading the entire filesystem to search for strings /{,**} r, - @{exec_path} mr, - include if exists }