mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 10:07:12 +00:00
Code Issues Releases Wiki Activity

profiles: small fix for gs profile

Browse Source 
Allow gs to run from confined environment by explicitly allowing access
to @{exec_path}.

Signed-off-by: Maxime Bélair <maxime.belair@canonical.com>
This commit is contained in:
Maxime Bélair 2025-05-12 16:11:13 +02:00
parent c99a73f1a0
commit acc0811c37
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
profiles/apparmor.d/gs
View File

@ -36,5 +36,7 @@ profile gs /usr/bin/gs {
# allow access to local printer devices # allow access to local printer devices
file rw @{print_devices}, file rw @{print_devices},
file mr @{exec_path},
include if exists <local/gs> include if exists <local/gs>
} }