blob: 94f365a00ef59bb1514afdd58f578ed500dd8114 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
|
# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile linux-sandbox /usr/libexec/@{multiarch}/bazel/linux-sandbox flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/linux-sandbox>
}
|
