From 924cb54da31e11968f0c5058f46be511462656e0 Mon Sep 17 00:00:00 2001 From: Bala Ramesh Date: Sat, 2 May 2026 07:38:37 -0500 Subject: [PATCH] Apparmor profile must contain "profile enroot" MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit AppArmor profiles are recommended to use the `profile` keyword when defining. Ref: https://apparmor.net/reference/profiles-quick-reference/ The keyword "profile" is required when a separate name is present and is encouraged even when not required. Vendors (without explicitly naming them) look for an AppArmor profile named `enroot` when init-ing. This change would ensure this template is more use-able. Thank you for your attention 🙇 --- conf/apparmor.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/apparmor.profile b/conf/apparmor.profile index 3fd26b2..816195a 100644 --- a/conf/apparmor.profile +++ b/conf/apparmor.profile @@ -1,7 +1,7 @@ abi , include -/usr/bin/enroot-nsenter flags=(unconfined) { +profile enroot /usr/bin/enroot-nsenter flags=(unconfined) { allow userns create, include if exists }