felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profile): better libdir for snap based profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-28 23:47:47 +00:00
parent 741980f8ab
commit cbbb2b4a3e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
9 changed files with 14 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/profiles-s-z/snap
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{bin_dirs} = @{bin}/ /snap/snapd/@{int}@{bin}
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}
@{bin_dirs} = @{bin}/ /snap/{snapd,core}/@{int}@{bin}
@{lib_dirs} = @{lib}/ /snap/{snapd,core}/@{int}@{lib}
@{exec_path} = @{bin_dirs}/snap
profile snap @{exec_path} {
@ -48,9 +48,9 @@ profile snap @{exec_path} {
@{bin}/systemctl rPx -> child-systemctl,
/snap/{,**} rw,
/snap/snapd/@{int}/usr/lib/snapd/snap-confine rPx -> /snap/snapd/@{int}/usr/lib/snapd/snap-confine,
@{lib}/snapd/snap-confine rPx -> /usr/lib/snapd/snap-confine,
@{lib_dirs}/snapd/snap-confine rPx,
@{lib_dirs}/snapd/snap-seccomp rPx,
@{lib_dirs}/snapd/snapd rPx,