/lib is allowed via the AppArmor base abstraction and /dev directory reads is allowed as a convenience (apparmor and device cgroups mediate device access).
/lib is allowed via the AppArmor base abstraction and /dev directory reads is allowed as a convenience (apparmor and device cgroups mediate device access).