On my test VM I can see the cupsd profile DOES have 'attach_disconnected' flag, but not 'attach_disconnected.path=/run/'
If I add it and restart the cups.service, it starts successfully.
rsyslogd and sssd apparmor profiles do not have either these flags.
Could an apparmor abstraction work for this? i.e. if the system has 'boot-managed-by-snapd' package we could pull in an apparmor abstraction which adds these flags? Not sure what would be appropriate.
On my test VM I can see the cupsd profile DOES have 'attach_ disconnected' flag, but not 'attach_ disconnected. path=/run/ '
If I add it and restart the cups.service, it starts successfully.
rsyslogd and sssd apparmor profiles do not have either these flags.
Could an apparmor abstraction work for this? i.e. if the system has 'boot-managed- by-snapd' package we could pull in an apparmor abstraction which adds these flags? Not sure what would be appropriate.