Fish shell support about apparmor.d HOT 4 CLOSED

I can confirm that.
The same measure has fixed the issue for me.

There is a line in the default login profile like:
@{bin}/{,z,ba,da}sh rUx,
Adding the "fi" to the regex would solve this issue.
The resulting line would look like this:
@{bin}/{,z,ba,da,fi}sh rUx,

from apparmor.d.

I've compiled a list of common shell binaries we may want to add: #270

However, a quick search in the codebase reveals many profiles having a list of shells. I think probably better to have some kind of abstraction (e.g. abstractions/shell) rather than using a hard-coded list for each program.

from apparmor.d.

I've compiled a list of common shell binaries we may want to add: #270

However, a quick search in the codebase reveals many profiles having a list of shells. I think probably better to have some kind of abstraction (e.g. abstractions/shell) rather than using a hard-coded list for each program.

I guess that could be a solution but then we would need multiple additional abstractions.
If i'm not mistaken we would need at least one for "inherit execute" rix, like in the profile for ssh and another abstracton for "unconfined execute" rUx, like the one in login or sudo.

from apparmor.d.

The solution is to have a new variable that list all the possible interactive shell. Then it can be used in the profile like: @{bin}/@{sh} rUx, or @{bin}/@{sh} rix, depending on the need. I implement this soon

from apparmor.d.