felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-06 20:00:40 +00:00
parent 1307250250
commit cc133e5f57
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
26 changed files with 49 additions and 106 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/_full/bwrap
View file

@ -29,8 +29,12 @@ profile bwrap @{exec_path} flags=(attach_disconnected,mediate_deleted) {
network inet6 stream,
network netlink raw,
mount,
umount,
mount options=(rw, silent, rslave) -> /,
mount fstype=tmpfs -> /tmp/,
mount -> /newroot/{,**},
mount -> /oldroot/,
mount -> /tmp/newroot/,
umount /{,oldroot/},
pivot_root oldroot=/newroot/ -> /newroot/,
pivot_root oldroot=/tmp/oldroot/ -> /tmp/,