diff --git a/profiles/apparmor.d/abstractions/ssl_certs b/profiles/apparmor.d/abstractions/ssl_certs index 57d0f41a2..527bdf9f0 100644 --- a/profiles/apparmor.d/abstractions/ssl_certs +++ b/profiles/apparmor.d/abstractions/ssl_certs @@ -15,8 +15,9 @@ /etc/{,libre}ssl/ r, /etc/{,libre}ssl/cert.pem r, /etc/{,libre}ssl/certs/{,**} r, - /etc/pki/trust/{,*} r, - /etc/pki/trust/anchors/{,**} r, + /{etc,usr/share}/pki/bl[ao]cklist/{,*} r, + /{etc,usr/share}/pki/trust/{,*} r, + /{etc,usr/share}/pki/trust/anchors/{,**} r, /usr/share/ca-certificates/{,**} r, /usr/share/ssl/certs/ca-bundle.crt r, /usr/local/share/ca-certificates/{,**} r,