diff --git a/profiles/apparmor.d/abstractions/base b/profiles/apparmor.d/abstractions/base index 1dc5cf7df..bcc2554d8 100644 --- a/profiles/apparmor.d/abstractions/base +++ b/profiles/apparmor.d/abstractions/base @@ -100,6 +100,9 @@ # glibc statvfs @{PROC}/filesystems r, + # glibc malloc (man 5 proc) + @{PROC}/sys/vm/overcommit_memory r, + # Workaround https://launchpad.net/bugs/359338 until upstream handles stacked # filesystems generally. This does not appreciably decrease security with # Ubuntu profiles because the user is expected to have access to files owned