apparmor/profiles/apparmor.d/sbuild-shell
Daniel Richard G e4a395b620 profiles/Makefile: Clean up rules to better support extra profiles
Rename the "check-extras" target to "check-local" as it is no longer
limited to the extra profiles, and also fix a local include in the
sbuild-shell profile so that it passes the newly-applied CI check.
2024-04-16 01:57:16 -04:00

12 lines
357 B
Text

# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile sbuild-shell /usr/bin/sbuild-shell flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/sbuild-shell>
}