Octavio Galland commented on merge request !1727 at AppArmor / apparmor

Octavio Galland
2025-06-25T12:20:35Z

re 1: tested and works with read permissions alone. re 2: The main reason for this division was to not give execute permissions to unzip and friends, and not to give capabilities to zipgrep (now the latter doesn't have write permissions either). It's a bit of a thin hair to split, but if the permissions the two sets of binaries require are different (even though the come from the same package) I don't see a compelling reason to merge the profiles.