Merge pull request #2041 from jan-cerny/apparmor

Add AppArmor sysctl entries to exception list
OpenSCAP · Oct 5, 2023 · 03a6568 · 03a6568
2 parents e0ea126 + b4b480b
commit 03a6568
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/tests/probes/sysctl/test_sysctl_probe_all.sh b/tests/probes/sysctl/test_sysctl_probe_all.sh
@@ -16,9 +16,12 @@ SYSCTL_EXCLUDE='
 	fs.protected_fifos
 	fs.protected_regular
 	fs.protected_symlinks
+	kernel.apparmor_display_secid_mode
+	kernel.apparmor_restrict_unprivileged_userns
+	kernel.apparmor_restrict_unprivileged_userns_complain
+	kernel.apparmor_restrict_unprivileged_userns_force
 	kernel.cad_pid
 	kernel.unprivileged_userns_apparmor_policy
-	kernel.apparmor_display_secid_mode
 	kernel.usermodehelper.bset
 	kernel.usermodehelper.inheritable
 	net.core.bpf_jit_harden