spark-store-project/amber-ce-bookworm
15
0
Fork 0
mirror of https://gitee.com/amber-ce/amber-ce-bookworm.git synced 2025-12-14 02:52:04 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

apparmor

Browse Source
This commit is contained in:
shenmo
2024-05-07 13:51:50 +08:00
parent c1f7b9ac3b
commit 80cc726897
3 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/DEBIAN/control
View File

@@ -4,5 +4,5 @@ Section: misc
Priority: optional
Depends: bubblewrap,flatpak,zenity,policykit-1,gcc,systemd,procps
Maintainer: shenmo <shenmo@spark-app.store>
Architecture: arm64
Architecture: amd64
Description: bwrap wrapper for install and running debs inside a bookworm container

3
src/DEBIAN/postinst
View File

@@ -19,7 +19,6 @@ systemctl enable ace-bookworm-auto-upgrade
systemctl start ace-bookworm-auto-upgrade
fi
sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
systemctl reload apparmor
true

7
src/etc/apparmor.d/amber-ce-bookworm Normal file
View File

@@ -0,0 +1,7 @@
abi <abi/4.0>,
include <tunables/global>
profile bwrap /usr/bin/bwrap flags=(unconfined) {
userns,
#Site-specific additions and overrides. See local/README for details.
include if exists <local/bwrap>
}