A bare pivot_root rule would be acceptable to add to the unconfined template. We probably wouldn't want to add a bare change_profile rule to the template but could possibly add a set of rules that allow change_profile to anything except for "unconfined".
Another option would be to create a new template that allows a bare change_profile rule. Christopher is currently investigating the option of shipping the Libertine Manager UI as a deb, instead of a click, so we may not need to adjust the template for these two sets of rules if that provides a viable path forward. ** Summary changed: - Need "pivot_root" and "change_profile" exceptions for the unconfined temple + Need "pivot_root" and "change_profile" exceptions for the unconfined template -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1609919 Title: Need "pivot_root" and "change_profile" exceptions for the unconfined template Status in apparmor-easyprof-ubuntu package in Ubuntu: New Bug description: Per discussion on IRC, in order to support the Libertine Manager UI click package, we would need the "pivot_root" and "change_profile" exceptions added to the unconfined template in order for it to work. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1609919/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
