From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Fri, 20 Mar 2026 19:16:32 +0100 Subject: feat: first fully successful run e2e on straper --- .../db/public/apparmor/apparmor.d/sbuild-checkpackages | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 straper/db/public/apparmor/apparmor.d/sbuild-checkpackages (limited to 'straper/db/public/apparmor/apparmor.d/sbuild-checkpackages') diff --git a/straper/db/public/apparmor/apparmor.d/sbuild-checkpackages b/straper/db/public/apparmor/apparmor.d/sbuild-checkpackages new file mode 100644 index 0000000..581e412 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/sbuild-checkpackages @@ -0,0 +1,17 @@ +# This profile allows everything and only exists to give the +# application a name instead of having the label "unconfined" + +abi , +include + +profile sbuild-checkpackages /usr/bin/sbuild-checkpackages flags=(complain,attach_disconnected mediate_deleted) { + allow all, + + # override default pix + /usr/bin/unshare ix, + + userns, + + # Site-specific additions and overrides. See local/README for details. + include if exists +} -- cgit v1.3