amurray | deathmist: you can create a profile for bwrap itself locally if you want (but we haven't done that for the distro since it would allow any malware to just call bwrap to get a new user namespace and hence bypass this restriction) | 00:27 |
---|---|---|
amurray | eg. a profile like the ones mentioned in https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2046844/comments/5 should be sufficient for your needs | 00:28 |
-ubottu:#ubuntu-next- Launchpad bug 2046844 in angelfish (Ubuntu) "AppArmor user namespace creation restrictions cause many applications to crash with SIGTRAP" [Critical, In Progress] | 00:28 | |
=== JanC is now known as Guest1755 | ||
=== JanC_ is now known as JanC |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!