From d75ef19bbfc6e8d382b733a8084ac2b6b4bd85a1 Mon Sep 17 00:00:00 2001
From: Brian Gough <briangough@users.noreply.github.com>
Date: Mon, 22 Jun 2026 11:24:28 +0100
Subject: [PATCH] Merge pull request #34746 from overleaf/bg-clsi-apparmor

add new clsi apparmor profile for checkpoints

GitOrigin-RevId: 3a003263326613d3166343d54adb7050fe1e9847
---
 services/clsi/config/settings.defaults.cjs | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/services/clsi/config/settings.defaults.cjs b/services/clsi/config/settings.defaults.cjs
index 70c84d3201..eb576f8701 100644
--- a/services/clsi/config/settings.defaults.cjs
+++ b/services/clsi/config/settings.defaults.cjs
@@ -203,6 +203,16 @@ if ((process.env.DOCKER_RUNNER || process.env.SANDBOXED_COMPILES) === 'true') {
     }
   }
 
+  if (process.env.NEW_APPARMOR_PROFILE) {
+    try {
+      module.exports.clsi.docker.new_apparmor_profile =
+        process.env.NEW_APPARMOR_PROFILE
+    } catch (error) {
+      console.error(error, 'could not apply new apparmor profile setting')
+      process.exit(1)
+    }
+  }
+
   if (process.env.ALLOWED_IMAGES) {
     try {
       module.exports.clsi.docker.allowedImages =