Merge pull request #95 from bytedance/fix-disable-cap-privileged

fix: Correct typo in capability denial
bytedance · Jun 25, 2024 · 3f63c83 · 3f63c83
2 parents bb8eb43 + 947d85c
commit 3f63c83
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/profile/apparmor/apparmor.go b/internal/profile/apparmor/apparmor.go
@@ -144,7 +144,7 @@ func generateHardeningRules(rule, qualifier string) (rules string) {
 
 	// disable privileged capabilities
 	case "disable-cap-privileged":
-		rules += qualifier + "deny capability dac_read_searchn\n"
+		rules += qualifier + "deny capability dac_read_search,\n"
 		rules += qualifier + "deny capability linux_immutable,\n"
 		rules += qualifier + "deny capability net_broadcast,\n"
 		rules += qualifier + "deny capability net_admin,\n"