2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-21 17:47:10 +00:00

profiles: Allow curl to read tmp, for scripts which might use config/etags/data...

Signed-off-by: Simon Poirier <simon.poirier@canonical.com>
This commit is contained in:
Simon Poirier 2025-08-13 21:36:50 -04:00
parent a8875460ed
commit 01ab33202a

View File

@ -27,6 +27,9 @@ profile curl /usr/bin/curl {
# (see --config, --cacert options)
file r @{HOME}/**,
# allow reading data/config from tmp
owner file r /tmp/**,
# allow writing output to $HOME, /tmp (see -o option)
file w @{HOME}/**,
file w /tmp/**,