fix(profile): ensure PAM & systemd-homed compatibility.

see #321
2024-05-05 17:42:32 +01:00 · 2024-05-05 17:42:32 +01:00 · d544c386f7
commit d544c386f7
parent bfd9e9e3d6
3 changed files with 3 additions and 5 deletions
--- a/apparmor.d/profiles-g-l/groups
+++ b/apparmor.d/profiles-g-l/groups
@ -11,14 +11,10 @@ include <tunables/global>
 profile groups @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>
+  include <abstractions/nameservice-strict>

  @{exec_path} mr,

-  /etc/group r,
-  /etc/nsswitch.conf r,
-
-  @{run}/systemd/userdb r,
-
  @{PROC}/sys/kernel/random/boot_id r,

  /dev/tty@{int} rw,