mirror of
https://github.com/openai/codex.git
synced 2026-09-09 15:58:47 +00:00
ci: avoid broad apparmor profile enforcement
This commit is contained in:
1
.github/workflows/linux-sandbox-smoke.yml
vendored
1
.github/workflows/linux-sandbox-smoke.yml
vendored
@@ -100,7 +100,6 @@ jobs:
|
||||
|
||||
sudo ln -sf "$profile_source" "$profile_target"
|
||||
sudo apparmor_parser -r "$profile_target"
|
||||
sudo aa-enforce /usr/bin/bwrap
|
||||
if ! sudo grep -Eq '^bwrap \(enforce\)$' /sys/kernel/security/apparmor/profiles; then
|
||||
echo "Ubuntu's bwrap AppArmor profile is not loaded in enforce mode."
|
||||
sudo grep bwrap /sys/kernel/security/apparmor/profiles || true
|
||||
|
||||
Reference in New Issue
Block a user