The following profile worked for me, if it works for you I will get it uploaded asap. You can just drop it in a file and do
sudo apparmor_parser -r /path/to/your/file
to test it.
# This profile allows everything and only exists to give the # application a name instead of having the label "unconfined"
abi <abi/4.0>, include <tunables/global>
profile steam /usr/{lib/steam/bin_steam.sh,games/steam} flags=(unconfined) { userns,
# Site-specific additions and overrides. See local/README for details. include if exists <local/steam> }
The following profile worked for me, if it works for you I will get it uploaded asap. You can just drop it in a file and do
sudo apparmor_parser -r /path/to/your/file
to test it.
# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile steam /usr/{lib/ steam/bin_ steam.sh, games/steam} flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/steam>
}