2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00

profiles: small fix for gs profile

Allow gs to run from confined environment by explicitly allowing access
to @{exec_path}.

Signed-off-by: Maxime Bélair <maxime.belair@canonical.com>
This commit is contained in:
Maxime Bélair 2025-05-12 16:11:13 +02:00
parent c99a73f1a0
commit acc0811c37

View File

@ -36,5 +36,7 @@ profile gs /usr/bin/gs {
# allow access to local printer devices
file rw @{print_devices},
file mr @{exec_path},
include if exists <local/gs>
}