fix(profile): ensure ssh support security keys.

fix #686
2025-03-18 22:54:56 +01:00 · 2025-03-18 22:54:56 +01:00 · 5b1702b34c
commit 5b1702b34c
parent debed741ca
2 changed files with 2 additions and 0 deletions
--- a/apparmor.d/groups/ssh/ssh
+++ b/apparmor.d/groups/ssh/ssh
@ -11,6 +11,7 @@ include <tunables/global>
 profile ssh @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>
+  include <abstractions/devices-usb>
  include <abstractions/nameservice-strict>

  network inet stream,
--- a/apparmor.d/groups/ssh/ssh-sk-helper
+++ b/apparmor.d/groups/ssh/ssh-sk-helper
@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/{,ssh/}ssh-sk-helper
 profile ssh-sk-helper flags=(complain) {
  include <abstractions/base>
+  include <abstractions/devices-usb>

  @{exec_path} mr,