From 22322a8bef97b44c8fbfb6edf506e02542752f48 Mon Sep 17 00:00:00 2001 From: Sam Date: Mon, 6 Oct 2025 09:37:43 -0700 Subject: [PATCH] [Apparmor] Update profile for strict parsing **Background** Latest version of apparmor gives the following error: > AppArmor parser error for /etc/apparmor.d/gremlin in profile /etc/apparmor.d/gremlin at line 63: syntax error, unexpected TOK_DENY, expecting TOK_ID or TOK_END_OF_RULE This is because the previous line doesn't have a `,` (TOK_END_OF_RULE) Previous versions of AppArmor accepted this, but later versions do not --- gremlin/agent_apparmor.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gremlin/agent_apparmor.profile b/gremlin/agent_apparmor.profile index 2ba9ae6..9023c45 100644 --- a/gremlin/agent_apparmor.profile +++ b/gremlin/agent_apparmor.profile @@ -57,7 +57,7 @@ profile gremlin-agent flags=(attach_disconnected,mediate_deleted) { capability sys_ptrace, # Needed for Gremlin Process Exhaustion - capability sys_resource + capability sys_resource, # General deny deny /bin/** wl,