The following profile works for me, using ** because user of bitbake might put the code anywhere, it is not a hardcode path, so this might match any path entry.
$ cat /etc/apparmor.d/bitbake
abi <abi/4.0>,
include <tunables/global>
profile bitbake /**/bitbake/bin/bitbake flags=(unconfined) {
userns,
}
The following profile works for me, using ** because user of bitbake might put the code anywhere, it is not a hardcode path, so this might match any path entry.
$ cat /etc/apparmor. d/bitbake bin/bitbake flags=(unconfined) {
abi <abi/4.0>,
include <tunables/global>
profile bitbake /**/bitbake/
userns,
}
$ sudo apparmor_parser -r /etc/apparmor. d/bitbake