diff --git a/apparmor.d/groups/ssh/ssh b/apparmor.d/groups/ssh/ssh index a1046dbb5..476bd3f26 100644 --- a/apparmor.d/groups/ssh/ssh +++ b/apparmor.d/groups/ssh/ssh @@ -25,7 +25,7 @@ profile ssh @{exec_path} { @{bin}/@{shells} rUx, - @{lib}/ssh/ssh-sk-helper rix -> ssh//null-@{lib}/ssh/ssh-sk-helper, + @{lib}/ssh/ssh-sk-helper rix -> ssh-sk-helper, @{etc_ro}/ssh/ssh_config r, @{etc_ro}/ssh/ssh_config.d/{,*} r, diff --git a/apparmor.d/groups/ssh/ssh-sk-helper b/apparmor.d/groups/ssh/ssh-sk-helper index 915086e9c..2013371b3 100644 --- a/apparmor.d/groups/ssh/ssh-sk-helper +++ b/apparmor.d/groups/ssh/ssh-sk-helper @@ -2,8 +2,9 @@ # Copyright (C) 2024 valoq # SPDX-License-Identifier: GPL-2.0-only -profile ssh//null-@{lib}/ssh/ssh-sk-helper { - / r, +include + +profile ssh-sk-helper flags=(complain) { @{lib}/ssh/ssh-sk-helper r,