mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-29 13:28:19 +00:00
Code Issues Releases Wiki Activity

unprivileged_userns profile: Allow full file system access

Browse Source 
Fixes https://gitlab.com/apparmor/apparmor/-/issues/505

The profile previously permitted access to `/**`, which excludes the root
directory (`/`). This commit also gives `/` access, aligning with the
intended behavior.

Signed-off-by: Maxime Bélair <maxime.belair@canonical.com>
(cherry picked from commit 182db98c2aed2dd01d434bdc66c352ac1bf6f891)
Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
Maxime Bélair 2025-04-10 15:28:15 +02:00 committed by John Johansen
parent 53074bb906
commit 29f6ac644f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
profiles/apparmor.d/unprivileged_userns
View File

@ -13,7 +13,7 @@ profile unprivileged_userns {
allow network,
allow signal,
allow dbus,
allow file rwlkm /**,
allow file rwlkm /{,**},
allow unix,
allow mqueue,
allow ptrace,