Comment 16 for bug 1643706

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

/lib is allowed via the AppArmor base abstraction and /dev directory reads is allowed as a convenience (apparmor and device cgroups mediate device access).