From d091915dce6e83e04ace78e73daf4e5bd74756c9 Mon Sep 17 00:00:00 2001 From: viyatb-oai Date: Fri, 17 Apr 2026 13:46:39 -0700 Subject: [PATCH] ci: avoid broad apparmor profile enforcement --- .github/workflows/linux-sandbox-smoke.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/linux-sandbox-smoke.yml b/.github/workflows/linux-sandbox-smoke.yml index 7c6ed568b4..a356de91b9 100644 --- a/.github/workflows/linux-sandbox-smoke.yml +++ b/.github/workflows/linux-sandbox-smoke.yml @@ -100,7 +100,6 @@ jobs: sudo ln -sf "$profile_source" "$profile_target" sudo apparmor_parser -r "$profile_target" - sudo aa-enforce /usr/bin/bwrap if ! sudo grep -Eq '^bwrap \(enforce\)$' /sys/kernel/security/apparmor/profiles; then echo "Ubuntu's bwrap AppArmor profile is not loaded in enforce mode." sudo grep bwrap /sys/kernel/security/apparmor/profiles || true