This profile bypasses the restriction of unprivileged user namespaces,
therefore Ubuntu cannot ship it, and we recommend you don't use it as
well. If an application calls bwrap with a valid use of unpriv userns,
then a profile for that app should be created instead. Let me know if
you need any help with that
** Changed in: apparmor (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/2089378
Title:
bwrap needs an apparmor profile to work
Status in apparmor package in Ubuntu:
Invalid
Bug description:
Ubuntu Version: 24.04.1
Package: apparmor 4.0.1really4.0.1-0ubuntu0.24.04.3
Due to
https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces
bwrap does not work out of the box anymore. The error is:
bwrap: setting up uid map: Permission denied
I fixed it by creating this file: /etc/apparmor.d/bwrap
```
abi <abi/4.0>,
include <tunables/global>
profile bwrap /usr/bin/bwrap flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/bwrap>
}
```
Could you include this fix in the apparmor package?
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2089378/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
