Merge pull request #953 from stgraber/main

incusd/apparmor: Allow /dev/shm in forkproxy
lxc · Jun 24, 2024 · 2872d32 · 2872d32
2 parents a25ec96 + 7ed8424
commit 2872d32
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/internal/server/apparmor/instance_forkproxy.go b/internal/server/apparmor/instance_forkproxy.go
@@ -59,6 +59,9 @@ profile "{{ .name }}" flags=(attach_disconnected,mediate_deleted) {
   /run/{resolvconf,NetworkManager,systemd/resolve,connman,netconfig}/resolv.conf r,
   /usr/lib/systemd/resolv.conf r,
 
+  # Allow /dev/shm access (for Wayland)
+  /dev/shm/** rwkl,
+
   # Needed for the fork sub-commands
   {{ .exePath }} mr,
   @{PROC}/@{pid}/cmdline r,