felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profiles): ensure entry points for snap work.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-05 13:59:37 +01:00
parent 2242fc3f47
commit e169ea5ccf
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 36 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/profiles-s-z/snap
View file

@ -6,7 +6,10 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/snap /snap/snapd/@{int}@{bin}/snap
@{bin_dirs} = @{bin}/ /snap/snapd/@{int}@{bin}/
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}/
@{exec_path} = @{bin_dirs}/snap
profile snap @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
@ -43,9 +46,9 @@ profile snap @{exec_path} {
@{bin}/systemctl rPx -> child-systemctl,
/snap/{,**} rw,
/{snap/snapd/@{int}/,}{usr/,}lib/snapd/snap-confine rPx,
/{snap/snapd/@{int}/,}{usr/,}lib/snapd/snap-seccomp rPx,
/{snap/snapd/@{int}/,}{usr/,}lib/snapd/snapd r,
@{lib_dirs}/snapd/snap-confine rPx,
@{lib_dirs}/snapd/snap-seccomp rPx,
@{lib_dirs}/snapd/snapd rPx,
/etc/fstab r,