mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-31 07:17:22 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): bwrap always need userns.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-19 14:48:32 +00:00
parent dee02b8698
commit 928f27dbf5
Failed to generate hash of commit
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/abstractions/bwrap
View file

@ -4,10 +4,12 @@
# Minimal set of rules for bwrap
# A profile using this abstaction still needs to set:
# A profile using this abstraction still needs to set:
# - the attach_disconnected flag
# - bwrap execution: '@{bin}/bwrap rix,'
# userns,
capability net_admin,
capability setpcap,
capability sys_admin,

2
apparmor.d/groups/gnome/nautilus
View file

@ -26,8 +26,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict>
include <abstractions/trash>
# userns,
# mqueue r type=posix /,
dbus bind bus=session name=org.gnome.Nautilus,