felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(fsp): systemd drop in files: configure stacked profile

Browse source 
It comes as a replacement of old and unsecure config that was disabling the nnp flag.
The new solution is:
1. Safe
2. Scalable  as hundred of profile could be configured this way
This commit is contained in:
Alexandre Pujol 2025-05-26 23:31:35 +02:00
parent 4ffbf84a00
commit 8f3f3816ed
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 29 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

2
systemd/full/system/dbus-org.freedesktop.machine1.service
View file

@ -1,2 +1,2 @@
[Service]
NoNewPrivileges=no
AppArmorProfile=&systemd-machined