Thanks for the check David.
It intentionally runs under the same confinement as gpsd does to not break out too easily.
You can modify you local allowance in:
/etc/apparmor.d/local/usr.sbin.gpsd
That file is intended to take whatever you want to custom-change in the apparmor rules for gpsd.
It will survive upgrades and will effectively be included by the packaged profile.
So we can fix the bug reported here by the upload that I have prepared.
I'll go on with the fix ...
P.S. I'm still concerned about the operation="ptrace" peer="unconfined", but would need a functional issue due to those being blocked to open them up. Preferably then more fine grained than "all of them". If you happen to find what exactly triggers those and what might be missing due to that please let me know in a new bug.
Thanks for the check David. apparmor. d/local/ usr.sbin. gpsd
It intentionally runs under the same confinement as gpsd does to not break out too easily.
You can modify you local allowance in:
/etc/
That file is intended to take whatever you want to custom-change in the apparmor rules for gpsd.
It will survive upgrades and will effectively be included by the packaged profile.
So we can fix the bug reported here by the upload that I have prepared.
I'll go on with the fix ...
P.S. I'm still concerned about the operation="ptrace" peer="unconfined", but would need a functional issue due to those being blocked to open them up. Preferably then more fine grained than "all of them". If you happen to find what exactly triggers those and what might be missing due to that please let me know in a new bug.