steam_support: make libexec and lib files executable canonical#12794

Allows files in `/usr/libexec` and `/usr/lib` to execute. See canonical/steam-snap#227 for context.
alexmurray · Oct 17, 2023 · 079296b · 079296b
1 parent 6d1b786
commit 079296b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/interfaces/builtin/steam_support.go b/interfaces/builtin/steam_support.go
@@ -197,7 +197,8 @@ umount /,
 deny /usr/bin/{chfn,chsh,gpasswd,mount,newgrp,passwd,su,sudo,umount} x,
 /usr/bin/** ixr,
 /usr/sbin/** ixr,
-/usr/lib/pressure-vessel/** ixr,
+/usr/libexec/** ixr,
+/usr/lib/** ixr,
 /run/host/** mr,
 /run/pressure-vessel/** mrw,
 /run/host/usr/sbin/ldconfig* ixr,