profiles/apparmor.d/tinyproxy: use nameservice-strict abstraction

tinyproxy does not need all of nameservice, nameservice-strict is
sufficient. Thanks to @cboltz for the suggestion.

Signed-off-by: Alex Murray <alex.murray@canonical.com>
This commit is contained in:
Alex Murray 2025-02-04 11:26:24 +10:30
parent 503a89e5ef
commit 861be3904b
Failed to generate hash of commit

View file

@ -16,7 +16,7 @@ include <tunables/global>
profile tinyproxy /usr/bin/tinyproxy { profile tinyproxy /usr/bin/tinyproxy {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice-strict>
# to provide flexibility, when run as root tinyproxy may need to read files # to provide flexibility, when run as root tinyproxy may need to read files
# owned by other users # owned by other users