felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): snap: improve update-ns.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-30 18:50:16 +02:00
parent 811cb64390
commit 73e3ac6cbd
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/snap/snap-update-ns
View file

@ -24,10 +24,11 @@ profile snap-update-ns @{exec_path} {
mount -> /usr/**, mount -> /usr/**,
mount -> /var/lib/dhcp/, mount -> /var/lib/dhcp/,
umount /snap/**,
umount /var/lib/dhcp/,
umount @{lib}/@{multiarch}/webkit2gtk-@{version}/, umount @{lib}/@{multiarch}/webkit2gtk-@{version}/,
umount /snap/**,
umount /tmp/.snap/**,
umount /usr/share/xml/iso-codes/, umount /usr/share/xml/iso-codes/,
umount /var/lib/dhcp/,
@{exec_path} mr, @{exec_path} mr,
@{lib_dirs}/**.so* mr, @{lib_dirs}/**.so* mr,
@ -42,6 +43,8 @@ profile snap-update-ns @{exec_path} {
/usr/ r, /usr/ r,
/usr/local/ r, /usr/local/ r,
/usr/local/share/ r, /usr/local/share/ r,
/usr/local/share/doc/ rw,
/usr/local/share/fonts/ rw,
owner /snap/{,**} rw, owner /snap/{,**} rw,