run identity: /home/ubuntu/.local/state/g1vm/runs/20261024T233431Z-check-boot-kvm/disk.qcow2
  over /nix/store/axmxsd8j9hj2sq5m0d7idjbhjnazisr1-g1-virt-overlay-5.15.148-tegra/g1-virt-overlay.qcow2
  allow: /nix/store/cwlifl8nbx3p1b86yb40gsqc78j40ljv-g1vm-0.2.0/libexec/g1vm/allow/boot.allow /nix/store/cwlifl8nbx3p1b86yb40gsqc78j40ljv-g1vm-0.2.0/libexec/g1vm/allow/boot.allow
  101 changed, 1 undeclared (15 s in the g1-fs helper)

boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-Ys1ire
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-Ys1ire/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-QIbB60
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-QIbB60/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-k6JuXv
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-k6JuXv/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-ISoiLX
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-ISoiLX/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-9DlcOK
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-9DlcOK/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-eHa0JW
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-eHa0JW/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-4JQr87
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-4JQr87/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-weN11s
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-weN11s/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-ChRNZW
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-ChRNZW/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-oeRcjf
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-oeRcjf/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-OxIIeh
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-OxIIeh/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-a1ViU3
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-a1ViU3/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-22ebiZ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-22ebiZ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-K7RXqG
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-K7RXqG/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-07nWeZ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-07nWeZ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-WXVPJj
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-WXVPJj/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-cYrEY3
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-cYrEY3/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-uDuFI5
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-uDuFI5/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-8HUCO2
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-8HUCO2/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-Wd2MQ6
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-Wd2MQ6/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-Q69nlQ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-Q69nlQ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-4DLqCH
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-4DLqCH/tmp
boot.allow:18  - f 1000:1000 - /tmp/gdm3-config-err-H18sL0
boot.allow:16  - s 0:0 - /tmp/.X11-unix/X0
boot.allow:17  - s 1000:1000 - /tmp/.ICE-unix/1747
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-ModemManager.service-yp9gwW/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-haveged.service-M4HTLu/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-power-profiles-daemon.service-2rmxir/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-switcheroo-control.service-eXx5xb/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-hostnamed.service-6DtITd/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-logind.service-SijiTB/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-resolved.service-2MGmPR/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timedated.service-m0C1EN/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timesyncd.service-dgo2Ju/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-ModemManager.service-EmmxvV/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-haveged.service-exkj2z/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-power-profiles-daemon.service-IJzxhM/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-switcheroo-control.service-sLA7Mh/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-hostnamed.service-MssNKM/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-logind.service-WVaOxJ/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-resolved.service-IRu9Ab/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timedated.service-mrDQsR/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timesyncd.service-obHECm/tmp
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-ModemManager.service-yp9gwW
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-haveged.service-M4HTLu
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-power-profiles-daemon.service-2rmxir
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-switcheroo-control.service-eXx5xb
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-hostnamed.service-6DtITd
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-logind.service-SijiTB
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-resolved.service-2MGmPR
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timedated.service-m0C1EN
boot.allow:14  d 700 0:0 - /tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timesyncd.service-dgo2Ju
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-ModemManager.service-EmmxvV
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-haveged.service-exkj2z
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-power-profiles-daemon.service-IJzxhM
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-switcheroo-control.service-sLA7Mh
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-hostnamed.service-MssNKM
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-logind.service-WVaOxJ
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-resolved.service-IRu9Ab
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timedated.service-mrDQsR
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-fd05724340994066aa372647525719a7-systemd-timesyncd.service-obHECm
boot.allow:34  f 600 0:0 9271a4b1ba781f7d6fe99e28889956fab032214fef2e80ecb916c4a98dd6039a /var/lib/snapd/state.json
boot.allow:19  f 600 0:0 bbfa6c73a2a31b1266b4a77d71be99c8ef457b1c5fe301cb356985c0ec7cdce1 /var/lib/systemd/random-seed
boot.allow:36  f 600 1000:1000 57fee26beb41daf2a77799a1dc7d07e12bc8132efa9287f8a2abe801842a0675 /home/unitree/.config/pulse/5dbfb12414a3456d9014d88183e338b1-device-volumes.tdb
boot.allow:27  f 640 0:4 03fa5005e04e57a0cb75af91d5b95cff4cff4842e2fa2aa02dbdcf2f67e83c07 /var/log/dmesg.4.gz
boot.allow:27  f 640 0:4 047824700caa5e07f740eebcda4a0d94623d9469faa2f8ae739eff05c7b952b0 /var/log/dmesg.3.gz
boot.allow:27  f 640 0:4 46fe80650c62f5b9ff48ad145e47f66173fd57e746ff3c6d1afa52491451cc30 /var/log/dmesg.1.gz
boot.allow:27  f 640 0:4 e094e1bb3f498ece558cfa1fc7ba9fd01347621dcf0f01150975a70ab3d2ff60 /var/log/dmesg.2.gz
boot.allow:26  f 640 0:4 e3a80152b757ef75233ec262efb4a3ce405a0894e315b593b5b11690aa2f2dbb /var/log/dmesg
boot.allow:27  f 640 0:4 f8b9a3505a9f9759a3a7591418945f35ff38b297c7cae1830ef796e552a41bd2 /var/log/dmesg.0
boot.allow:22  f 640 107:4 2e61b4b8afd30c53aa53dd2de644eeb7f17ec73e00eb1617feefd974aae75b08 /var/log/syslog
boot.allow:23  f 640 107:4 b162c73f3c47cb58c1940f3cbeac9741d74279f3bb11d9e641b603978a05c252 /var/log/kern.log
boot.allow:24  f 640 107:4 c6f8dcd9a3d726222f9fd6db3b2b228e9cbcb76660ac1c0dc4741c1075e7a97c /var/log/auth.log
boot.allow:29  f 644 0:0 3603f0afb13425304056e37ee048479f6d090cb823b231b054841d4824c5eb64 /var/log/Xorg.0.log.old
boot.allow:31  f 644 0:0 7b849cbbd1a62c9a07293bb044e472535726192be52ff42978a437438b282527 /var/lib/NetworkManager/timestamps
boot.allow:20  f 644 0:0 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa /var/lib/systemd/rfkill/wlan
boot.allow:28  f 644 0:0 a99937a0f0b6325821c6aabbeab1c5a8ec229e66c53e2ce2ddcac616fd2548a3 /var/log/Xorg.0.log
boot.allow:25  f 664 0:43 5d7cf73adfc510e47c69d3b9b9955e62282f7ddd89a046b9f9799efdf8eeda53 /var/log/wtmp
UNDECLARED  f 664 0:43 bba8381e99f330731c663fd3deedfd12df974306c8ca7d3a1e2fe2e964b84533 /var/log/lastlog

declared, not written in this run:
  boot.allow:32 /var/lib/NetworkManager/seen-bssids
  boot.allow:33 /var/lib/NetworkManager/internal-*.lease
  boot.allow:35 /var/cache/snapd/**
  boot.allow:38 /var/crash/_usr_sbin_nvbootctrl.*.crash
  boot.allow:39 /var/log/apport.log
  boot.allow:41 /var/spool/anacron/*
  boot.allow:42 /var/backups/dpkg.*
  boot.allow:43 /var/backups/apt.extended_states.*
  boot.allow:47 /var/cache/apt/**
  boot.allow:48 /var/lib/apt/lists/**
  boot.allow:49 /var/lib/apt/periodic/*
  boot.allow:50 /var/lib/update-notifier/**
  boot.allow:51 /var/cache/swcatalog/**
  boot.allow:52 /var/lib/swcatalog/**
  boot.allow:53 /var/lib/ubuntu-advantage/**
  boot.allow:54 /var/log/ubuntu-advantage.log
  boot.allow:32 /var/lib/NetworkManager/seen-bssids
  boot.allow:33 /var/lib/NetworkManager/internal-*.lease
  boot.allow:35 /var/cache/snapd/**
  boot.allow:38 /var/crash/_usr_sbin_nvbootctrl.*.crash
  boot.allow:39 /var/log/apport.log
  boot.allow:41 /var/spool/anacron/*
  boot.allow:42 /var/backups/dpkg.*
  boot.allow:43 /var/backups/apt.extended_states.*
  boot.allow:47 /var/cache/apt/**
  boot.allow:48 /var/lib/apt/lists/**
  boot.allow:49 /var/lib/apt/periodic/*
  boot.allow:50 /var/lib/update-notifier/**
  boot.allow:51 /var/cache/swcatalog/**
  boot.allow:52 /var/lib/swcatalog/**
  boot.allow:53 /var/lib/ubuntu-advantage/**
  boot.allow:54 /var/log/ubuntu-advantage.log
