interfaces/default: allow owner read on @{PROC}/@{pid}/sessionid

This is used by auditd, and is generally safe to expose. Signed-off-by: Zeyad Gouda <[email protected]>
canonical · Nov 21, 2024 · 98cdc21 · 98cdc21
1 parent 34933e3
commit 98cdc21
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/interfaces/apparmor/template.go b/interfaces/apparmor/template.go
@@ -267,6 +267,7 @@ var templateCommon = `
   @{PROC}/@{pid}/io r,
   owner @{PROC}/@{pid}/limits r,
   owner @{PROC}/@{pid}/loginuid r,
+  owner @{PROC}/@{pid}/sessionid r,
   @{PROC}/@{pid}/smaps r,
   @{PROC}/@{pid}/stat r,
   @{PROC}/@{pid}/statm r,