Merge pull request #183 from simondeziel/apparmor-unpriv-quirk

Apparmor unpriv quirk
canonical · Oct 11, 2023 · cde327f · cde327f
2 parents b02d799 + e387b3a
commit cde327f
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 4 deletions.
diff --git a/snapcraft/wrappers/editor b/snapcraft/wrappers/editor
@@ -17,8 +17,6 @@ run_cmd() {
 
 USERNS=1
 [ -e /proc/sys/kernel/unprivileged_userns_clone ] && grep -qxF 0 /proc/sys/kernel/unprivileged_userns_clone && USERNS=0
-[ -e /proc/sys/kernel/apparmor_restrict_unprivileged_userns ] && grep -qxF 1 /proc/sys/kernel/apparmor_restrict_unprivileged_userns && USERNS=0
-[ -e /proc/sys/kernel/apparmor_restrict_unprivileged_unconfined ] && grep -qxF 1 /proc/sys/kernel/apparmor_restrict_unprivileged_unconfined && USERNS=0
 
 find_and_spawn() {
     for path in / /usr/ /usr/local/; do

diff --git a/snapcraft/wrappers/remote-viewer b/snapcraft/wrappers/remote-viewer
@@ -16,8 +16,6 @@ run_cmd() {
 
 USERNS=1
 [ -e /proc/sys/kernel/unprivileged_userns_clone ] && grep -qxF 0 /proc/sys/kernel/unprivileged_userns_clone && USERNS=0
-[ -e /proc/sys/kernel/apparmor_restrict_unprivileged_userns ] && grep -qxF 1 /proc/sys/kernel/apparmor_restrict_unprivileged_userns && USERNS=0
-[ -e /proc/sys/kernel/apparmor_restrict_unprivileged_unconfined ] && grep -qxF 1 /proc/sys/kernel/apparmor_restrict_unprivileged_unconfined && USERNS=0
 
 find_and_spawn() {
     for path in / /usr/ /usr/local/; do