From 5b1702b34c702f2bb218b9046b819855be1a5f01 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Tue, 18 Mar 2025 22:54:56 +0100
Subject: [PATCH] fix(profile): ensure ssh support security keys.

fix #686
---
 apparmor.d/groups/ssh/ssh           | 1 +
 apparmor.d/groups/ssh/ssh-sk-helper | 1 +
 2 files changed, 2 insertions(+)

diff --git a/apparmor.d/groups/ssh/ssh b/apparmor.d/groups/ssh/ssh
index 6b8ec14d6..43fbddc63 100644
--- a/apparmor.d/groups/ssh/ssh
+++ b/apparmor.d/groups/ssh/ssh
@@ -11,6 +11,7 @@ include <tunables/global>
 profile ssh @{exec_path} {
   include <abstractions/base>
   include <abstractions/consoles>
+  include <abstractions/devices-usb>
   include <abstractions/nameservice-strict>
 
   network inet stream,
diff --git a/apparmor.d/groups/ssh/ssh-sk-helper b/apparmor.d/groups/ssh/ssh-sk-helper
index c8c29dbaf..ff9de97c3 100644
--- a/apparmor.d/groups/ssh/ssh-sk-helper
+++ b/apparmor.d/groups/ssh/ssh-sk-helper
@@ -9,6 +9,7 @@ include <tunables/global>
 @{exec_path} = @{lib}/{,ssh/}ssh-sk-helper
 profile ssh-sk-helper flags=(complain) {
   include <abstractions/base>
+  include <abstractions/devices-usb>
 
   @{exec_path} mr,