diff --git a/profiles/apparmor.d/lsb_release b/profiles/apparmor.d/lsb_release index 509ec9ace..5c05ba4db 100644 --- a/profiles/apparmor.d/lsb_release +++ b/profiles/apparmor.d/lsb_release @@ -13,6 +13,8 @@ profile lsb_release { owner @{PROC}/@{pid}/fd/ r, + /dev/tty rw, + /usr/bin/lsb_release r, /usr/bin/python3.[0-9] mr, @@ -20,10 +22,15 @@ profile lsb_release { /etc/default/apport r, /etc/dpkg/origins/** r, /etc/lsb-release r, + /etc/lsb-release.d/ r, /{usr/,}bin/bash ixr, /{usr/,}bin/dash ixr, + /usr/bin/basename ixr, /usr/bin/dpkg-query ixr, + /usr/bin/getopt ixr, + /usr/bin/sed ixr, + /usr/bin/tr ixr, # TODO - many more permissions needed for this to work deny /usr/bin/apt-cache x, @@ -32,6 +39,7 @@ profile lsb_release { /usr/include/python*/pyconfig.h r, /usr/share/distro-info/** r, /usr/share/dpkg/** r, + /usr/share/terminfo/** r, /var/lib/dpkg/** r, # file_inherit