feat(fsp): allow signal from system-user for some user app.

2024-03-05 00:25:39 +00:00 · 2024-03-05 00:25:39 +00:00 · 62f1f7df6e
commit 62f1f7df6e
parent 3c77da8f7d
24 changed files with 41 additions and 6 deletions
--- a/apparmor.d/groups/systemd/systemd-generator-ds-identify
+++ b/apparmor.d/groups/systemd/systemd-generator-ds-identify
@ -12,6 +12,8 @@ profile systemd-generator-ds-identify @{exec_path} flags=(attach_disconnected) {
  include <abstractions/consoles>
  include <abstractions/nameservice-strict>

+  ptrace (read) peer=@{systemd},
+
  @{exec_path} mr,

  @{sh_path}                     rix,