felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): bwrap always need userns.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-19 14:48:32 +00:00
parent dee02b8698
commit 928f27dbf5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/abstractions/bwrap
View file

@ -4,10 +4,12 @@
# Minimal set of rules for bwrap
# A profile using this abstaction still needs to set:
# A profile using this abstraction still needs to set:
# - the attach_disconnected flag
# - bwrap execution: '@{bin}/bwrap rix,'
# userns,
capability net_admin,
capability setpcap,
capability sys_admin,