2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 10:07:12 +00:00

profiles: restore exec path rules from profiles where they were removed

These profiles don't have an attachment so the path needs to be hardcoded

Fixes: 6e9ff1fa6 ("profiles: update the rest of the profiles to use @{exec_path}")
Signed-off-by: Ryan Lee <ryan.lee@canonical.com>
This commit is contained in:
Ryan Lee 2025-06-17 10:26:54 -07:00
parent c35d5eb6b2
commit 9a04cd58a6
2 changed files with 5 additions and 0 deletions

View File

@ -14,6 +14,9 @@ profile lsb_release {
include <abstractions/python>
include <abstractions/terminfo>
# Hardcode the path due to omission of attachment
/usr/bin/lsb_release r,
owner @{PROC}/@{pid}/fd/ r,
/dev/tty rw,

View File

@ -15,6 +15,8 @@ profile nvidia_modprobe {
capability sys_admin,
# Main executable
# Hardcode the path due to omission of attachment
/usr/bin/nvidia-modprobe mr,
# Other executables