From d575812e2906331f77dfcb7e41da44d2afa273c2 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Sun, 25 May 2025 18:27:30 +0200
Subject: [PATCH] fix(profile): snapd journalctl subprofile.

---
 apparmor.d/groups/snap/snapd | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apparmor.d/groups/snap/snapd b/apparmor.d/groups/snap/snapd
index c1b24176e..b65283987 100644
--- a/apparmor.d/groups/snap/snapd
+++ b/apparmor.d/groups/snap/snapd
@@ -204,6 +204,7 @@ profile snapd @{exec_path} {
     include <abstractions/consoles>
 
     capability net_admin,
+    capability sys_resource,
 
     network netlink raw,
 
@@ -215,6 +216,8 @@ profile snapd @{exec_path} {
     /{run,var}/log/journal/ r,
     /{run,var}/log/journal/@{hex32}/{,*} r,
 
+    @{run}/systemd/notify w,
+
     include if exists <local/snapd_journalctl>
   }