mirror of
git://code.qt.io/qt/qt5.git
synced 2026-03-02 10:37:08 +08:00
4a184bed88
Pick-to: 6.10 6.8 6.5
Task-number: QTQAINFRA-7709
Change-Id: Ia8802cc2c5e7fb8ed63e261f70fb343cd55a1dfa
Reviewed-by: Edward Welbourne <edward.welbourne@qt.io>
(cherry picked from commit 0ab91c0886)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
23 lines
762 B
Bash
Executable File
23 lines
762 B
Bash
Executable File
#!/usr/bin/env bash
|
|
#Copyright (C) 2024 The Qt Company Ltd
|
|
#SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
|
|
|
|
# See https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces
|
|
# and https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2046844/comments/89
|
|
sudo bash -c 'cat > /etc/apparmor.d/bwrap' << EOF
|
|
# This profile allows everything and only exists to give the
|
|
# application a name instead of having the label "unconfined"
|
|
|
|
abi <abi/4.0>,
|
|
include <tunables/global>
|
|
|
|
profile bwrap /usr/bin/bwrap flags=(unconfined) {
|
|
userns,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
include if exists <local/bwrap>
|
|
}
|
|
EOF
|
|
|
|
sudo apparmor_parser -r /etc/apparmor.d/bwrap
|