apparmor/profiles/apparmor.d/toybox
Zygmunt Krynicki 5c17df0219 profiles: attach toybox profile to /usr/bin/toybox
This is the actual path used on Debian and derivatives.

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
2025-01-21 11:16:24 +01:00

12 lines
339 B
Text

# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile toybox /usr/bin/toybox flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/toybox>
}