mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
19 lines
506 B
Plaintext
19 lines
506 B
Plaintext
# This profile allows everything and only exists to give the
|
|
# application a name instead of having the label "unconfined"
|
|
|
|
abi <abi/4.0>,
|
|
include <tunables/global>
|
|
|
|
profile sbuild-abort /usr/bin/sbuild-abort flags=(attach_disconnected mediate_deleted) {
|
|
allow all,
|
|
@{exec_path} mrix,
|
|
|
|
# override default pix, assumes allow all is at lower priority
|
|
/usr/bin/unshare ix,
|
|
|
|
userns,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
include if exists <local/sbuild-abort>
|
|
}
|