feat(abs): deny apparmor/.null in the base abstraction.

2024-03-03 11:51:39 +00:00 · 2024-03-03 11:51:39 +00:00 · 7e8f854b16
commit 7e8f854b16
parent ba6172bb8c
23 changed files with 2 additions and 41 deletions
--- a/apparmor.d/groups/children/child-systemctl
+++ b/apparmor.d/groups/children/child-systemctl
@ -46,7 +46,5 @@ profile child-systemctl flags=(attach_disconnected) {

  @{run}/systemd/private rw,

-  deny /apparmor/.null rw,
-
  include if exists <local/child-systemctl>
 }