Merge pull request canonical#1967 from jdstrand/lp1626121

interfaces/apparmor: allow 'm' in default policy for snap-exec
olivercalder · Sep 21, 2016 · 1d3e3e8 · 1d3e3e8
2 parents 1ca20d5 + 60b7e8f
commit 1d3e3e8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/interfaces/apparmor/template.go b/interfaces/apparmor/template.go
@@ -185,6 +185,9 @@ var defaultTemplate = []byte(`
   /{,usr/}bin/zip ixr,
   /{,usr/}bin/zipgrep ixr,
 
+  # For snappy reexec on 4.8+ kernels
+  /usr/lib/snapd/snap-exec m,
+
   # For printing the cache (we don't allow updating the cache)
   /{,usr/}sbin/ldconfig{,.real} ixr,