apparmor: ubuntu_pro_esm_cache: comment about super globbing for gpgv

canonical · Apr 1, 2024 · 0fb4dee · 0fb4dee
1 parent 746400f
commit 0fb4dee
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/debian/apparmor/ubuntu_pro_esm_cache.jinja2 b/debian/apparmor/ubuntu_pro_esm_cache.jinja2
@@ -218,6 +218,8 @@ profile ubuntu_pro_esm_cache flags=(attach_disconnected) {
     / r,
     /etc/dpkg/** r,
 
+    # there are just too many shell script tools that are called, like head,
+    # tail, cut, sed, etc
     /{,usr/}bin/* mrix,
 
     /usr/lib/apt/methods/gpgv mr,