From ce5e5a15fb856c0b48a487b34d15fb0cf8694a8d Mon Sep 17 00:00:00 2001
From: Valentin Volkl <valentin.volkl@cern.ch>
Date: Thu, 20 Mar 2025 10:03:14 +0000
Subject: [PATCH] fusermount3: allow ro mounts on /cvmfs

---
 profiles/apparmor.d/fusermount3 | 1 +
 1 file changed, 1 insertion(+)

diff --git a/profiles/apparmor.d/fusermount3 b/profiles/apparmor.d/fusermount3
index c9d2bfca9..fba2e308d 100644
--- a/profiles/apparmor.d/fusermount3
+++ b/profiles/apparmor.d/fusermount3
@@ -21,6 +21,7 @@ profile fusermount3 /usr/bin/fusermount3 {
   mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> @{run}/user/@{uid}/*/,
   mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /media/**/,
   mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /tmp/**/,
+  mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /cvmfs/**/,
 
   umount @{HOME}/**/,
   umount /mnt/{,**/},