fix(profile): whereis: allow search in /opt.

fix #532
2024-10-01 18:32:39 +01:00 · 2024-10-01 18:32:39 +01:00 · bd0f3448cb
commit bd0f3448cb
parent b96362d915
1 changed files with 2 additions and 2 deletions
--- a/apparmor.d/profiles-s-z/whereis
+++ b/apparmor.d/profiles-s-z/whereis
@ -27,8 +27,8 @@ profile whereis @{exec_path} {
  /usr/src/{**,} r,

  /opt/ r,
-  /opt/cni/bin/ r,
-  /opt/containerd/bin/ r,
+  /opt/**/bin/ r,
+  /opt/**/lib/ r,

  @{etc_ro}/ r,