mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-02-07 10:45:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): bwrap always need userns.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-19 14:48:32 +00:00
parent dee02b8698
commit 928f27dbf5
Failed to generate hash of commit
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/abstractions/bwrap
View file

@ -4,10 +4,12 @@
# Minimal set of rules for bwrap # Minimal set of rules for bwrap
# A profile using this abstaction still needs to set: # A profile using this abstraction still needs to set:
# - the attach_disconnected flag # - the attach_disconnected flag
# - bwrap execution: '@{bin}/bwrap rix,' # - bwrap execution: '@{bin}/bwrap rix,'
# userns,
capability net_admin, capability net_admin,
capability setpcap, capability setpcap,
capability sys_admin, capability sys_admin,

2
apparmor.d/groups/gnome/nautilus
View file

@ -26,8 +26,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/trash> include <abstractions/trash>
# userns,
# mqueue r type=posix /, # mqueue r type=posix /,
dbus bind bus=session name=org.gnome.Nautilus, dbus bind bus=session name=org.gnome.Nautilus,