feat(profiles): general update.

2023-09-15 22:01:08 +01:00 · 2023-09-15 22:01:08 +01:00 · 6a78b17d23
commit 6a78b17d23
parent 1d68b5bbc4
22 changed files with 62 additions and 35 deletions
--- a/apparmor.d/groups/systemd/journalctl
+++ b/apparmor.d/groups/systemd/journalctl
@ -47,6 +47,7 @@ profile journalctl @{exec_path} flags=(attach_disconnected) {
  @{run}/host/container-manager r,
  @{run}/systemd/journal/io.systemd.journal rw,

+        @{PROC}/sys/fs/nr_open r,
  owner @{PROC}/@{pid}/cgroup r,

  deny @{user_share_dirs}/gvfs-metadata/* r,