From 246624ddf266c0a27e07d00ac6ca0df50741e828 Mon Sep 17 00:00:00 2001
From: Ganga Ram <Ganga.Ram@tii.ae>
Date: Wed, 11 Sep 2024 11:27:06 +0400
Subject: [PATCH] apparmorRulesFromClosure: include more directories

Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
---
 pkgs/os-specific/linux/apparmor/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/pkgs/os-specific/linux/apparmor/default.nix b/pkgs/os-specific/linux/apparmor/default.nix
index f70ba4c7aad1..4a82ce057454 100644
--- a/pkgs/os-specific/linux/apparmor/default.nix
+++ b/pkgs/os-specific/linux/apparmor/default.nix
@@ -324,12 +324,16 @@ let
     , baseRules ? [
         "r $path"
         "r $path/etc/**"
-        "r $path/share/**"
+        "mr $path/share/**"
         # Note that not all libraries are prefixed with "lib",
         # eg. glibc-2.30/lib/ld-2.30.so
         "mr $path/lib/**.so*"
+        "mr $path/lib64/**.so*"
         # eg. glibc-2.30/lib/gconv/gconv-modules
         "r $path/lib/**"
+        "r $path/lib64/**"
+        # Internal executables
+        "ixr $path/libexec/**"
       ]
     , name ? ""
     }: rootPaths: runCommand