diff options
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/ch-run')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/ch-run | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/ch-run b/straper/db/public/apparmor/apparmor.d/ch-run new file mode 100644 index 0000000..2d20b43 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/ch-run @@ -0,0 +1,12 @@ +# This profile allows everything and only exists to give the +# application a name instead of having the label "unconfined" + +abi <abi/4.0>, +include <tunables/global> + +profile ch-run /usr/bin/ch-run flags=(unconfined) { + userns, + + # Site-specific additions and overrides. See local/README for details. + include if exists <local/ch-run> +} |