mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 00:14:44 +01:00
70125895f3
Balena Etcher runs in a degraded sandbox mode when unprivileged userns is not available. Add an unconfined profile so it's properly sandboxed. Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>
12 lines
374 B
Text
12 lines
374 B
Text
# This profile allows everything and only exists to give the
|
|
# application a name instead of having the label "unconfined"
|
|
|
|
abi <abi/4.0>,
|
|
include <tunables/global>
|
|
|
|
profile balena-etcher /usr/lib/balena-etcher/balena-etcher flags=(unconfined) {
|
|
userns,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
include if exists <local/balena-etcher>
|
|
}
|