Initial commit

2026-05-01 06:48:52 -04:00
commit 9b9d44c384
4 changed files with 124 additions and 0 deletions
@@ -0,0 +1,11 @@
+abi <abi/4.0>,
+include <tunables/global>
+
+# Give bubblewrap a named AppArmor profile that is otherwise unconfined, but
+# explicitly allows user namespace creation on Ubuntu 24.04+.
+profile bwrap /usr/bin/bwrap flags=(unconfined) {
+  userns,
+
+  # Site-specific additions and overrides. See /etc/apparmor.d/local/README.
+  include if exists <local/usr.bin.bwrap>
+}