From 96b1aa549ba22439d74310fd29b02d1eb49bdce1 Mon Sep 17 00:00:00 2001
From: Julio Gonzalez Gil <git@juliogonzalez.es>
Date: Wed, 8 Nov 2023 18:10:45 +0100
Subject: [PATCH] Allow reading /run/systemd/sessions/

Several applications use it now that utmp and wtmp are
being removed because they are not Y2038 compliant

This is the case for example in openSUSE Tumbleweed and
openSUSE MicroOS:
https://microos.opensuse.org/blog/2023-11-06-utmp-and-wtmp-are-gone/

Closes https://gitlab.com/apparmor/apparmor/-/issues/360
---
 profiles/apparmor.d/abstractions/wutmp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/profiles/apparmor.d/abstractions/wutmp b/profiles/apparmor.d/abstractions/wutmp
index a12c85bfd..1432b4779 100644
--- a/profiles/apparmor.d/abstractions/wutmp
+++ b/profiles/apparmor.d/abstractions/wutmp
@@ -18,5 +18,8 @@
   /var/log/btmp     rwk,
   @{run}/utmp       rwk,
 
+  # Some read the list of sessions from systemd
+  /run/systemd/sessions/ r,
+
   # Include additions to the abstraction
   include if exists <abstractions/wutmp.d>