From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001
From: Lukasz Kasprzak <lukasz.kasprzak@pm.me>
Date: Tue, 14 Apr 2026 22:32:43 +0200
Subject: cleaned up many scrits and deleted some that were of no use; renamed
 a lot

---
 .../public/apparmor/apparmor.d/unprivileged_userns | 27 ----------------------
 1 file changed, 27 deletions(-)
 delete mode 100644 straper/db/public/apparmor/apparmor.d/unprivileged_userns

(limited to 'straper/db/public/apparmor/apparmor.d/unprivileged_userns')

diff --git a/straper/db/public/apparmor/apparmor.d/unprivileged_userns b/straper/db/public/apparmor/apparmor.d/unprivileged_userns
deleted file mode 100644
index bac3f26..0000000
--- a/straper/db/public/apparmor/apparmor.d/unprivileged_userns
+++ /dev/null
@@ -1,27 +0,0 @@
-# Special profile transitioned to by unconfined when creating an unprivileged
-# user namespace.
-#
-abi <abi/4.0>,
-include <tunables/global>
-
-profile unprivileged_userns flags=(complain) {
-     audit deny capability,
-     audit deny change_profile,
-
-     # allow block to be replaced by allow when x dominance test is fixed
-     #allow all,
-     allow network,
-     allow signal,
-     allow dbus,
-     allow file rwlkm /**,
-     allow unix,
-     allow mqueue,
-     allow ptrace,
-     allow userns,
-
-     # stack children to strip capabilities
-     allow pix /** -> &unprivileged_userns ,
-
-     # Site-specific additions and overrides. See local/README for details.
-     include if exists <local/unprivileged_userns>
-}
-- 
cgit v1.3