From 1e6af96b3975edd20b161f4fefde8e6275de68b3 Mon Sep 17 00:00:00 2001 From: Vincent43 <31109921+Vincent43@users.noreply.github.com> Date: Sun, 19 Aug 2018 17:29:44 +0200 Subject: Revert "apparmor fix: somehow it cannot find the firejail profile to load it" This reverts commit 949a221a1b92e422e6dcb7ea6089ed5c8d5cc22a. The 'firejail-default' is the name of 'unnatached' profile not path to it. Moreover names starting with '/' are changing profile type back to 'standard' which in this case means we literally create profile for the profile file itself '/etc/apparmor.d/firejail-default'. That means firejail would never load this profile to contain any app thus we have to revert this. For more info, see https://www.suse.com/documentation/sles-15/singlehtml/book_security/book_security.html#sec.apparmor.profiles.types.unattached --- etc/firejail-default | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/firejail-default b/etc/firejail-default index 3542d9bc9..09dc896e6 100644 --- a/etc/firejail-default +++ b/etc/firejail-default @@ -10,7 +10,7 @@ ########## @{PID}={[1-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9]} -profile /etc/apparmor.d/firejail-default flags=(attach_disconnected,mediate_deleted) { +profile firejail-default flags=(attach_disconnected,mediate_deleted) { ########## # Allow D-Bus access. It may negatively affect security. Comment those lines or -- cgit v1.2.3-54-g00ecf