felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profiles): ensure entry points for snap work.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-05 13:59:37 +01:00
parent 2242fc3f47
commit e169ea5ccf
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 36 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/profiles-s-z/snap-seccomp
View file

@ -6,7 +6,9 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/snapd/snap-seccomp /snap/snapd/@{int}@{lib}/snapd/snap-seccomp
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}/
@{exec_path} = @{lib_dirs}/snapd/snap-seccomp
profile snap-seccomp @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
@ -16,8 +18,6 @@ profile snap-seccomp @{exec_path} {
@{exec_path} mr,
/snap/snapd/@{int}/usr/lib/snapd/snap-seccomp r,
/var/lib/snapd/seccomp/bpf/{,**} rw,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,