From de5efd803f0757d1885715275d688b9da042a632 Mon Sep 17 00:00:00 2001
From: "prompt.ac/@jeffrey" <mail@aesthetic.computer>
Date: Sat, 5 Sep 2026 14:46:24 -0400
Subject: [PATCH] Let Bubblewrap own Mediascholar isolation

---
 .../mediascholar/systemd/mediascholar.service  | 18 +++---------------
 1 file changed, 3 insertions(+), 15 deletions(-)

diff --git a/papers/mediascholar/systemd/mediascholar.service b/papers/mediascholar/systemd/mediascholar.service
index 6290f99ef4..a8b6209910 100644
--- a/papers/mediascholar/systemd/mediascholar.service
+++ b/papers/mediascholar/systemd/mediascholar.service
@@ -31,20 +31,8 @@ UMask=0077
 # aa-exec must enter the named AppArmor profile before Bubblewrap creates the
 # namespace. Bubblewrap sets no_new_privs for the provider process itself.
 NoNewPrivileges=false
-PrivateTmp=true
-ProtectSystem=strict
-ProtectHome=read-only
-ReadWritePaths=%h/.local/share/mediascholar
-ReadWritePaths=%h/.config/slab/ledger/advertise
-InaccessiblePaths=-%h/aesthetic-computer-vault
-InaccessiblePaths=-%h/.ssh
-InaccessiblePaths=-%h/.aws
-InaccessiblePaths=-%h/.gnupg
-InaccessiblePaths=-%h/.config/claude/oauth-token
-InaccessiblePaths=-%h/.config/mediascholar/credentials
-InaccessiblePaths=-%h/.claude
-InaccessiblePaths=-%h/.codex
-ProtectKernelTunables=true
-ProtectControlGroups=true
+# Filesystem, PID, temporary-file, device, and capability isolation are applied
+# by run-sandboxed.sh. Per-user systemd mount isolation would create a nested
+# user namespace before AppArmor can authorize Bubblewrap on Ubuntu 24.04.
 LockPersonality=true
 RestrictSUIDSGID=true
-- 
2.51.2