Re: [systemd-devel] Can AppArmor be used with NoNewPrivileges=true enabled

2023-08-21 Thread Lennart Poettering
On Fr, 18.08.23 13:25, 嵩智 (dir...@gmail.com) wrote: > Hi all, > > I had a program which launched by systemd, and had NoNewPrivileges=true in > the service file. This program will use GIO subprocess to execute another > program2. Program2 will failed to run if applied AppArmor profile to it. > But

[systemd-devel] Can AppArmor be used with NoNewPrivileges=true enabled

2023-08-17 Thread 嵩智
Hi all, I had a program which launched by systemd, and had NoNewPrivileges=true in the service file. This program will use GIO subprocess to execute another program2. Program2 will failed to run if applied AppArmor profile to it. But if mark NoNewPrivileges=true out, then everything works fine. Ca