FM / apparmor.d

/etc/apparmor.d

Name	Size	Mode	Actions
abi/	-	0755	rm
abstractions/	-	0755	rm
disable/	-	0755	rm
force-complain/	-	0755	rm
local/	-	0755	rm
rsyslog.d/	-	0755	rm
tunables/	-	0755	rm
1password	354	0644	edit dl rm
balena-etcher	374	0644	edit dl rm
brave	348	0644	edit dl rm
buildah	342	0644	edit dl rm
busybox	342	0644	edit dl rm
cam	330	0644	edit dl rm
ch-checkns	351	0644	edit dl rm
ch-run	339	0644	edit dl rm
chrome	349	0644	edit dl rm
code	349	0644	edit dl rm
crun	333	0644	edit dl rm
devhelp	342	0644	edit dl rm
Discord	352	0644	edit dl rm
element-desktop	368	0644	edit dl rm
epiphany	356	0644	edit dl rm
evolution	348	0644	edit dl rm
firefox	410	0644	edit dl rm
flatpak	342	0644	edit dl rm
foliate	342	0644	edit dl rm
geary	336	0644	edit dl rm
github-desktop	378	0644	edit dl rm
goldendict	353	0644	edit dl rm
ipa_verify	351	0644	edit dl rm
kchmviewer	353	0644	edit dl rm
keybase	346	0644	edit dl rm
lc-compliance	360	0644	edit dl rm
libcamerify	354	0644	edit dl rm
linux-sandbox	383	0644	edit dl rm
loupe	336	0644	edit dl rm
lsb_release	1379	0644	edit dl rm
lxc-attach	351	0644	edit dl rm
lxc-create	351	0644	edit dl rm
lxc-destroy	354	0644	edit dl rm
lxc-execute	354	0644	edit dl rm
lxc-stop	345	0644	edit dl rm
lxc-unshare	354	0644	edit dl rm
lxc-usernsexec	363	0644	edit dl rm
mmdebstrap	351	0644	edit dl rm
MongoDB_Compass	386	0644	edit dl rm
msedge	352	0644	edit dl rm
nautilus	346	0644	edit dl rm
notepadqq	402	0644	edit dl rm
nvidia_modprobe	1213	0644	edit dl rm
obsidian	350	0644	edit dl rm
opam	333	0644	edit dl rm
opera	355	0644	edit dl rm
pageedit	347	0644	edit dl rm
plasmashell	680	0644	edit dl rm
podman	339	0644	edit dl rm
polypane	350	0644	edit dl rm
privacybrowser	365	0644	edit dl rm
qcam	333	0644	edit dl rm
qmapshack	348	0644	edit dl rm
QtWebEngineProcess	404	0644	edit dl rm
qutebrowser	354	0644	edit dl rm
rootlesskit	354	0644	edit dl rm
rpm	330	0644	edit dl rm
rssguard	347	0644	edit dl rm
runc	334	0644	edit dl rm
sbuild	339	0644	edit dl rm
sbuild-abort	357	0644	edit dl rm
sbuild-adduser	364	0644	edit dl rm
sbuild-apt	351	0644	edit dl rm
sbuild-checkpackages	381	0644	edit dl rm
sbuild-clean	357	0644	edit dl rm
sbuild-createchroot	378	0644	edit dl rm
sbuild-destroychroot	382	0644	edit dl rm
sbuild-distupgrade	375	0644	edit dl rm
sbuild-hold	354	0644	edit dl rm
sbuild-shell	365	0644	edit dl rm
sbuild-unhold	360	0644	edit dl rm
sbuild-update	360	0644	edit dl rm
sbuild-upgrade	363	0644	edit dl rm
scide	355	0644	edit dl rm
signal-desktop	366	0644	edit dl rm
slack	342	0644	edit dl rm
slirp4netns	354	0644	edit dl rm
steam	363	0644	edit dl rm
stress-ng	348	0644	edit dl rm
surfshark	354	0644	edit dl rm
systemd-coredump	377	0644	edit dl rm
thunderbird	354	0644	edit dl rm
toybox	335	0644	edit dl rm
transmission	2400	0644	edit dl rm
trinity	342	0644	edit dl rm
tup	330	0644	edit dl rm
tuxedo-control-center	400	0644	edit dl rm
ubuntu_pro_apt_news	2064	0644	edit dl rm
ubuntu_pro_esm_cache	7217	0644	edit dl rm
unix-chkpwd	881	0644	edit dl rm
unprivileged_userns	699	0644	edit dl rm
userbindmount	360	0644	edit dl rm
usr.bin.man	3448	0644	edit dl rm
usr.bin.tcpdump	1687	0644	edit dl rm
usr.lib.snapd.snap-confine.real	31701	0644	edit dl rm
usr.sbin.chronyd	2838	0644	edit dl rm
usr.sbin.mysqld	2006	0644	edit dl rm
usr.sbin.rsyslogd	1872	0644	edit dl rm
uwsgi-core	351	0644	edit dl rm
vdens	336	0644	edit dl rm
virtiofsd	352	0644	edit dl rm
vivaldi-bin	358	0644	edit dl rm
vpnns	336	0644	edit dl rm
wike	333	0644	edit dl rm
wpcom	346	0644	edit dl rm

Edit: /etc/apparmor.d/ch-run (339B)

# This profile allows everything and only exists to give the # application a name instead of having the label "unconfined" abi , include profile ch-run /usr/bin/ch-run flags=(unconfined) { userns, # Site-specific additions and overrides. See local/README for details. include if exists }