feat(profile): remove rules already included in the base abs.

2024-09-20 23:30:09 +01:00 · 2024-09-20 23:30:09 +01:00 · 8979d84633
commit 8979d84633
parent 96defe021c
23 changed files with 8 additions and 35 deletions
--- a/apparmor.d/groups/virt/k3s
+++ b/apparmor.d/groups/virt/k3s
@ -130,7 +130,6 @@ profile k3s @{exec_path} flags=(attach_disconnected) {
        @{PROC}/sys/net/ipv{4,6}/conf/default/* rw,
        @{PROC}/sys/net/bridge/bridge-nf-call-iptables r,
        @{PROC}/sys/net/netfilter/* rw,
-        @{PROC}/sys/vm/overcommit_memory rw,
        @{PROC}/sys/vm/panic_on_oom r,

  @{sys}/class/net/ r,