mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
19 lines
536 B
Plaintext
19 lines
536 B
Plaintext
# This profile allows everything and only exists to give the
|
|
# application a name instead of having the label "unconfined"
|
|
|
|
abi <abi/4.0>,
|
|
include <tunables/global>
|
|
|
|
profile sbuild-destroychroot /usr/sbin/sbuild-destroychroot flags=(attach_disconnected mediate_deleted) {
|
|
allow all,
|
|
@{exec_path} mrix,
|
|
|
|
# override default pix, assumes allow all ix is at a lower priority
|
|
/usr/bin/unshare ix,
|
|
|
|
userns,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
include if exists <local/sbuild-destroychroot>
|
|
}
|