canonical/apparmor/dotfiles-nix


1
2
3
4
5
6
7
8
9
10

abi <abi/4.0>,
include <tunables/global>

profile dotfiles-nix-bwrap /nix/store/*-bubblewrap-*/bin/bwrap flags=(unconfined) {
  userns,
}

profile dotfiles-nix-podman /nix/store/*-podman-*/bin/{podman,.podman-wrapped} flags=(unconfined) {
  userns,
}