apparmor/profiles/apparmor.d/abstractions/user-tmp

# ------------------------------------------------------------------
#
#    Copyright (C) 2002-2009 Novell/SUSE
#    Copyright (C) 2009-2010 Canonical Ltd.
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

  # per-user tmp directories
  owner @{HOME}/tmp/**  rwkl,
  owner @{HOME}/tmp/    rw,

  # global tmp directories
  owner /var/tmp/**     rwkl,
  /var/tmp/             rw,
  owner /tmp/**         rwkl,
  /tmp/                 rw,

  # Include additions to the abstraction
  #include if exists <abstractions/user-tmp.d>
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381. 2006-04-11 21:52:54 +00:00			`# ------------------------------------------------------------------`
			`#`
pull in Ubuntu updates to profiles/apparmor.d 2009-11-04 14:25:42 -06:00			`# Copyright (C) 2002-2009 Novell/SUSE`
abstractions/user-tmp: require 'owner' matching 2010-05-12 10:52:23 +02:00			`# Copyright (C) 2009-2010 Canonical Ltd.`
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381. 2006-04-11 21:52:54 +00:00			`#`
			`# This program is free software; you can redistribute it and/or`
			`# modify it under the terms of version 2 of the GNU General Public`
			`# License published by the Free Software Foundation.`
			`#`
			`# ------------------------------------------------------------------`

			`# per-user tmp directories`
abstractions/user-tmp: require 'owner' matching 2010-05-12 10:52:23 +02:00			`owner @{HOME}/tmp/** rwkl,`
			`owner @{HOME}/tmp/ rw,`
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381. 2006-04-11 21:52:54 +00:00
			`# global tmp directories`
abstractions/user-tmp: require 'owner' matching 2010-05-12 10:52:23 +02:00			`owner /var/tmp/** rwkl,`
'owner' match in commit 1406 too strict for /tmp/ and /var/tmp/ 2010-08-09 09:56:31 -05:00			`/var/tmp/ rw,`
abstractions/user-tmp: require 'owner' matching 2010-05-12 10:52:23 +02:00			`owner /tmp/** rwkl,`
'owner' match in commit 1406 too strict for /tmp/ and /var/tmp/ 2010-08-09 09:56:31 -05:00			`/tmp/ rw,`
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
			`#include if exists <abstractions/user-tmp.d>`