Jason Thistlethwaite
12 lines
363 B
Plaintext
Executable File
12 lines
363 B
Plaintext
Executable File
abi <abi/4.0>,
|
|
include <tunables/global>
|
|
|
|
# Give bubblewrap a named AppArmor profile that is otherwise unconfined, but
|
|
# explicitly allows user namespace creation on Ubuntu 24.04+.
|
|
profile bwrap /usr/bin/bwrap flags=(unconfined) {
|
|
userns,
|
|
|
|
# Site-specific additions and overrides. See /etc/apparmor.d/local/README.
|
|
include if exists <local/usr.bin.bwrap>
|
|
}
|