profiles/apparmor.d/tinyproxy: allow capability set[ug]id

Signed-off-by: Alex Murray <alex.murray@canonical.com>
This commit is contained in:
Alex Murray 2025-02-06 18:50:42 +10:30
parent 965a678cb7
commit 94d494d8fe
Failed to generate hash of commit

View file

@ -19,6 +19,7 @@ profile tinyproxy /usr/bin/tinyproxy {
include <abstractions/nameservice-strict>
# allow to drop privileges
capability setuid,
capability setgid,
# to provide flexibility, when run as root tinyproxy may need to read files