mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00
Code Issues Releases Wiki Activity

profiles: restore exec path rules from profiles where they were removed

Browse Source 
These profiles don't have an attachment so the path needs to be hardcoded

Fixes: 6e9ff1fa6 ("profiles: update the rest of the profiles to use @{exec_path}")
Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
This commit is contained in:
Ryan Lee 2025-06-17 10:26:54 -07:00
parent c35d5eb6b2
commit 9a04cd58a6
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
profiles/apparmor.d/lsb_release
View File

@ -14,6 +14,9 @@ profile lsb_release {
include <abstractions/python> include <abstractions/python>
include <abstractions/terminfo> include <abstractions/terminfo>
# Hardcode the path due to omission of attachment
/usr/bin/lsb_release r,
owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/fd/ r,
/dev/tty rw, /dev/tty rw,

2
profiles/apparmor.d/nvidia_modprobe
View File

@ -15,6 +15,8 @@ profile nvidia_modprobe {
capability sys_admin, capability sys_admin,
# Main executable # Main executable
# Hardcode the path due to omission of attachment
/usr/bin/nvidia-modprobe mr,
# Other executables # Other executables