mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
36d0ceaf19
Foliate is using user namespaces via bwrap. For now add an unconfined profile to support it. Fixes: https://github.com/johnfactotum/foliate/issues/1271 Signed-off-by: John Johansen <john.johansen@canonical.com>
12 lines
342 B
Text
12 lines
342 B
Text
# This profile allows everything and only exists to give the
|
|
# application a name instead of having the label "unconfined"
|
|
|
|
abi <abi/4.0>,
|
|
include <tunables/global>
|
|
|
|
profile foliate /usr/bin/foliate flags=(unconfined) {
|
|
userns,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
include if exists <local/foliate>
|
|
}
|