From c51f189ca0f6723475a0db2d860f58c28ccc8496 Mon Sep 17 00:00:00 2001
From: doublez13 <zakraise@eng.utah.edu>
Date: Thu, 4 Sep 2025 07:46:04 -0600
Subject: [PATCH] Use abstractions where possible

---
 apparmor.d/profiles-g-l/kdestroy | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/apparmor.d/profiles-g-l/kdestroy b/apparmor.d/profiles-g-l/kdestroy
index 0a4ed9ab5..ccc0a2b25 100644
--- a/apparmor.d/profiles-g-l/kdestroy
+++ b/apparmor.d/profiles-g-l/kdestroy
@@ -9,16 +9,13 @@ include <tunables/global>
 @{exec_path} = @{bin}/kdestroy
 profile kdestroy @{exec_path} {
   include <abstractions/base>
+  include <abstractions/kerberosclient>
 
   #Allow root to destroy other users' creds cache
   capability dac_override,
 
   @{exec_path} mr,
 
-  #Config Files
-  /etc/krb5.conf r,
-  /etc/krb5.conf.d/{,**} r,
-
   #Credentials cache
   /tmp/krb5cc_* rwk,
   /tmp/tkt* rwk,