name : snap.aws-cli.aws #include <tunables/global> #include if exists "/etc/apparmor.d/tunables/home.d" # This is a snap name without the instance key @{SNAP_NAME}="aws-cli" # This is a snap name with instance key @{SNAP_INSTANCE_NAME}="aws-cli" @{SNAP_INSTANCE_DESKTOP}="aws-cli" @{SNAP_COMMAND_NAME}="aws" @{SNAP_REVISION}="1890" @{PROFILE_DBUS}="snap_2eaws_2dcli_2eaws" @{INSTALL_DIR}="/{,var/lib/snapd/}snap" profile "snap.aws-cli.aws" flags=(attach_disconnected,mediate_deleted,complain) { # set file rules so that exec() inherits our profile unless there is # already a profile for it (eg, snap-confine) / rwkl, /** rwlkm, /** pix, capability, change_profile unsafe /**, dbus, network, mount, remount, umount, pivot_root, ptrace, signal, unix, }