diff options
Diffstat (limited to 'canonical/apparmor')
| -rw-r--r-- | canonical/apparmor/dotfiles-nix | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/canonical/apparmor/dotfiles-nix b/canonical/apparmor/dotfiles-nix new file mode 100644 index 0000000..b894210 --- /dev/null +++ b/canonical/apparmor/dotfiles-nix @@ -0,0 +1,10 @@ +abi <abi/4.0>, +include <tunables/global> + +profile dotfiles-nix-bwrap /nix/store/*-bubblewrap-*/bin/bwrap flags=(unconfined) { + userns, +} + +profile dotfiles-nix-podman /nix/store/*-podman-*/bin/{podman,.podman-wrapped} flags=(unconfined) { + userns, +} |