apparmorRulesFromClosure: include more directories

Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
2024-09-11 15:09:37 +04:00
parent 395742841f
commit 246624ddf2
1 changed files with 5 additions and 1 deletions
@@ -324,12 +324,16 @@ let
    , baseRules ? [
        "r $path"
        "r $path/etc/**"
-        "r $path/share/**"
+        "mr $path/share/**"
        # Note that not all libraries are prefixed with "lib",
        # eg. glibc-2.30/lib/ld-2.30.so
        "mr $path/lib/**.so*"
+        "mr $path/lib64/**.so*"
        # eg. glibc-2.30/lib/gconv/gconv-modules
        "r $path/lib/**"
+        "r $path/lib64/**"
+        # Internal executables
+        "ixr $path/libexec/**"
      ]
    , name ? ""
    }: rootPaths: runCommand