From fba1ced1bca71a4c64244a2f3e604070b7f0f09a Mon Sep 17 00:00:00 2001
From: John Johansen <john.johansen@canonical.com>
Date: Fri, 9 May 2025 04:52:53 -0700
Subject: [PATCH] fixup profile

---
 profiles/apparmor.d/ipa_verify | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/profiles/apparmor.d/ipa_verify b/profiles/apparmor.d/ipa_verify
index 0b12f98da..1f03793e5 100644
--- a/profiles/apparmor.d/ipa_verify
+++ b/profiles/apparmor.d/ipa_verify
@@ -3,16 +3,12 @@ abi <abi/4.0>,
 include <tunables/global>
 
 @{arg1}=/**/*.so
-profile ipa_verify /usr/bin/ipa_verify flags=(unconfined) {
-  userns,
-  @{exec_path} mr,
-
 profile ipa_verify /usr/bin/ipa_verify {
     include <abstractions/base>
     # Until we can replace arg1 above with real arg parsing
     include <abstractions/private-files-strict>
 
-    /usr/bin/ipa_verify r,
+    @{exec_path} mr,
     
     # Probably enumerated by libcamera initialization but not needed for this tool's functionality
     deny /sys/devices/system/node/ r,