2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00

Merge profiles: restore exec path rules from profiles where they were removed

Fixes: 6e9ff1fa6 ("profiles: update the rest of the profiles to use @{exec_path}")

Signed-off-by: Ryan Lee <ryan.lee@canonical.com>

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1721
Approved-by: John Johansen <john@jjmx.net>
Merged-by: John Johansen <john@jjmx.net>
This commit is contained in:
John Johansen 2025-06-17 18:22:03 +00:00
commit 17f91ba6e2
2 changed files with 5 additions and 0 deletions

View File

@ -14,6 +14,9 @@ profile lsb_release {
include <abstractions/python>
include <abstractions/terminfo>
# Hardcode the path due to omission of attachment
/usr/bin/lsb_release r,
owner @{PROC}/@{pid}/fd/ r,
/dev/tty rw,

View File

@ -15,6 +15,8 @@ profile nvidia_modprobe {
capability sys_admin,
# Main executable
# Hardcode the path due to omission of attachment
/usr/bin/nvidia-modprobe mr,
# Other executables