run identity: /home/ubuntu/.local/state/g1vm/runs/20261024T235738Z-check-boot-kvm/disk.qcow2
  over /nix/store/axmxsd8j9hj2sq5m0d7idjbhjnazisr1-g1-virt-overlay-5.15.148-tegra/g1-virt-overlay.qcow2
  allow: /nix/store/10yqgrzxyidp3wb8shz5akb6y75pcd58-g1vm-0.2.0/libexec/g1vm/allow/boot.allow /nix/store/10yqgrzxyidp3wb8shz5akb6y75pcd58-g1vm-0.2.0/libexec/g1vm/allow/boot.allow
  101 changed, 0 undeclared (15 s in the g1-fs helper)

boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-Ys1ire
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-Ys1ire/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-QIbB60
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-QIbB60/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-k6JuXv
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-k6JuXv/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-ISoiLX
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-ISoiLX/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-9DlcOK
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-9DlcOK/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-eHa0JW
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-eHa0JW/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-4JQr87
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-4JQr87/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-weN11s
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-weN11s/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-ChRNZW
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-ChRNZW/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-oeRcjf
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-oeRcjf/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-OxIIeh
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-OxIIeh/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-a1ViU3
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-a1ViU3/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-22ebiZ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-22ebiZ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-K7RXqG
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-K7RXqG/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-07nWeZ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-07nWeZ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-WXVPJj
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-WXVPJj/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-cYrEY3
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-cYrEY3/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-uDuFI5
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-uDuFI5/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-8HUCO2
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-8HUCO2/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-Wd2MQ6
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-Wd2MQ6/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-Q69nlQ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-Q69nlQ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-4DLqCH
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-4DLqCH/tmp
boot.allow:18  - f 1000:1000 - /tmp/gdm3-config-err-H18sL0
boot.allow:16  - s 0:0 - /tmp/.X11-unix/X0
boot.allow:17  - s 1000:1000 - /tmp/.ICE-unix/1747
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-ModemManager.service-MGloDJ/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-haveged.service-45hR6N/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-power-profiles-daemon.service-UY1lGk/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-switcheroo-control.service-ky2d1R/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-hostnamed.service-wJP3SB/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-logind.service-saXaeL/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-resolved.service-cOAzzT/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timedated.service-OhLO9u/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timesyncd.service-UXOjuc/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-ModemManager.service-wpMb0K/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-haveged.service-wiQFjJ/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-power-profiles-daemon.service-u2tm7y/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-switcheroo-control.service-Ifm6h0/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-hostnamed.service-oC5wFx/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-logind.service-89sjj3/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-resolved.service-micLWz/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timedated.service-cSaDJq/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timesyncd.service-yAvIev/tmp
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-ModemManager.service-MGloDJ
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-haveged.service-45hR6N
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-power-profiles-daemon.service-UY1lGk
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-switcheroo-control.service-ky2d1R
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-hostnamed.service-wJP3SB
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-logind.service-saXaeL
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-resolved.service-cOAzzT
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timedated.service-OhLO9u
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timesyncd.service-UXOjuc
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-ModemManager.service-wpMb0K
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-haveged.service-wiQFjJ
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-power-profiles-daemon.service-u2tm7y
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-switcheroo-control.service-Ifm6h0
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-hostnamed.service-oC5wFx
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-logind.service-89sjj3
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-resolved.service-micLWz
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timedated.service-cSaDJq
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c1ccd93be772406d9a1a601daff2dab6-systemd-timesyncd.service-yAvIev
boot.allow:35  f 600 0:0 9271a4b1ba781f7d6fe99e28889956fab032214fef2e80ecb916c4a98dd6039a /var/lib/snapd/state.json
boot.allow:19  f 600 0:0 dba60bbfcef231c2e2b59ec4c46d33f750eb95ac606fe1426ab5c4d3a1e85881 /var/lib/systemd/random-seed
boot.allow:37  f 600 1000:1000 57fee26beb41daf2a77799a1dc7d07e12bc8132efa9287f8a2abe801842a0675 /home/unitree/.config/pulse/5dbfb12414a3456d9014d88183e338b1-device-volumes.tdb
boot.allow:28  f 640 0:4 03fa5005e04e57a0cb75af91d5b95cff4cff4842e2fa2aa02dbdcf2f67e83c07 /var/log/dmesg.4.gz
boot.allow:28  f 640 0:4 047824700caa5e07f740eebcda4a0d94623d9469faa2f8ae739eff05c7b952b0 /var/log/dmesg.3.gz
boot.allow:27  f 640 0:4 2c93df79482fe7d9c92d6e63e2fa8d1490759c231a56019d24957389cdba70bf /var/log/dmesg
boot.allow:28  f 640 0:4 46fe80650c62f5b9ff48ad145e47f66173fd57e746ff3c6d1afa52491451cc30 /var/log/dmesg.1.gz
boot.allow:28  f 640 0:4 e094e1bb3f498ece558cfa1fc7ba9fd01347621dcf0f01150975a70ab3d2ff60 /var/log/dmesg.2.gz
boot.allow:28  f 640 0:4 f8b9a3505a9f9759a3a7591418945f35ff38b297c7cae1830ef796e552a41bd2 /var/log/dmesg.0
boot.allow:23  f 640 107:4 6d0ac92e2f5146d67db1d97d1e0c94c872fe019e0cf7290f4115c16ab70159f3 /var/log/kern.log
boot.allow:22  f 640 107:4 cdbf2f2a49328bf575ef684f7f83e4b18345464f0ab43738853b15d6d8b3d7af /var/log/syslog
boot.allow:24  f 640 107:4 da1585c4d9af1bbd2dd75adc9b65e4c5e39f36a16afecfc218cf51816cd9784f /var/log/auth.log
boot.allow:30  f 644 0:0 1fa9e8ac97b1bd8654d925533b9ab2ccbe006b2b7ec427d85ce699268bd964b2 /var/log/Xorg.0.log.old
boot.allow:32  f 644 0:0 2a1e0b8c0a6a2af0c2128e422bcca119783964ff9fe2b8114b72bfea91b1b7b2 /var/lib/NetworkManager/timestamps
boot.allow:29  f 644 0:0 2b05e03804a495f7297314b328ab67d726f59123fb1bbdf3eb31b342267c2782 /var/log/Xorg.0.log
boot.allow:20  f 644 0:0 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa /var/lib/systemd/rfkill/wlan
boot.allow:25  f 664 0:43 5b2e184d0f0ed6c2861c01a50e0c20a12fe2ed3046587564931257e8b0a9c3a6 /var/log/wtmp
boot.allow:26  f 664 0:43 ad1b6791105bcb936eaa50da81cc7d1eb55d9c27677c46d5fa5563063d8637a9 /var/log/lastlog

declared, not written in this run:
  boot.allow:33 /var/lib/NetworkManager/seen-bssids
  boot.allow:34 /var/lib/NetworkManager/internal-*.lease
  boot.allow:36 /var/cache/snapd/**
  boot.allow:39 /var/crash/_usr_sbin_nvbootctrl.*.crash
  boot.allow:40 /var/log/apport.log
  boot.allow:42 /var/spool/anacron/*
  boot.allow:43 /var/backups/dpkg.*
  boot.allow:44 /var/backups/apt.extended_states.*
  boot.allow:48 /var/cache/apt/**
  boot.allow:49 /var/lib/apt/lists/**
  boot.allow:50 /var/lib/apt/periodic/*
  boot.allow:51 /var/lib/update-notifier/**
  boot.allow:52 /var/cache/swcatalog/**
  boot.allow:53 /var/lib/swcatalog/**
  boot.allow:54 /var/lib/ubuntu-advantage/**
  boot.allow:55 /var/log/ubuntu-advantage.log
  boot.allow:33 /var/lib/NetworkManager/seen-bssids
  boot.allow:34 /var/lib/NetworkManager/internal-*.lease
  boot.allow:36 /var/cache/snapd/**
  boot.allow:39 /var/crash/_usr_sbin_nvbootctrl.*.crash
  boot.allow:40 /var/log/apport.log
  boot.allow:42 /var/spool/anacron/*
  boot.allow:43 /var/backups/dpkg.*
  boot.allow:44 /var/backups/apt.extended_states.*
  boot.allow:48 /var/cache/apt/**
  boot.allow:49 /var/lib/apt/lists/**
  boot.allow:50 /var/lib/apt/periodic/*
  boot.allow:51 /var/lib/update-notifier/**
  boot.allow:52 /var/cache/swcatalog/**
  boot.allow:53 /var/lib/swcatalog/**
  boot.allow:54 /var/lib/ubuntu-advantage/**
  boot.allow:55 /var/log/ubuntu-advantage.log
