feat(abs): deny apparmor/.null in the base abstraction.

2024-03-03 11:51:39 +00:00 · 2024-03-03 11:51:39 +00:00 · 7e8f854b16
commit 7e8f854b16
parent ba6172bb8c
23 changed files with 2 additions and 41 deletions
--- a/apparmor.d/groups/systemd/systemd-sysctl
+++ b/apparmor.d/groups/systemd/systemd-sysctl
@ -29,8 +29,5 @@ profile systemd-sysctl @{exec_path} flags=(attach_disconnected) {

  @{PROC}/sys/** rw,

-  # Inherit Silencer
-  deny /apparmor/.null rw,
-
  include if exists <local/systemd-sysctl>
 }