diff --git a/apparmor.d/groups/snap/snap-update-ns b/apparmor.d/groups/snap/snap-update-ns index 56b1cfc39..8628aa716 100644 --- a/apparmor.d/groups/snap/snap-update-ns +++ b/apparmor.d/groups/snap/snap-update-ns @@ -24,10 +24,11 @@ profile snap-update-ns @{exec_path} { mount -> /usr/**, mount -> /var/lib/dhcp/, - umount /snap/**, - umount /var/lib/dhcp/, umount @{lib}/@{multiarch}/webkit2gtk-@{version}/, + umount /snap/**, + umount /tmp/.snap/**, umount /usr/share/xml/iso-codes/, + umount /var/lib/dhcp/, @{exec_path} mr, @{lib_dirs}/**.so* mr, @@ -42,6 +43,8 @@ profile snap-update-ns @{exec_path} { /usr/ r, /usr/local/ r, /usr/local/share/ r, + /usr/local/share/doc/ rw, + /usr/local/share/fonts/ rw, owner /snap/{,**} rw,