apparmor/profiles/apparmor.d/tunables
intrigeri a91d199ab1 Make tunables/share play well with aliases.
This reverts commit aa3022208f.

Space-separated list of values don't play well with aliases.
For example, in Tails, despite this alias rule:

  alias / -> /lib/live/mount/rootfs/*.squashfs/,

… the Tor Browser profile denies access to
/lib/live/mount/rootfs/filesystem.squashfs/usr/share/mime/mime.cache, which
should be equivalent to /usr/share/mime/mime.cache. That's fixed by using
alternations instead; too bad they're less readable.

Possibly related:
https://bugs.launchpad.net/apparmor/+bug/888077
https://bugs.launchpad.net/apparmor/+bug/1703692
https://bugs.launchpad.net/apparmor/+bug/1703692
2019-01-07 12:58:56 +00:00
..
home.d make note of the trailing slash requirement in the home.d/site.local example 2010-01-05 15:43:32 -08:00
multiarch.d Author: Jamie Strandboge <jamie@canonical.com>, 2011-03-23 12:24:11 -07:00
xdg-user-dirs.d = Background = 2014-02-14 16:24:52 -06:00
alias as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
apparmorfs apparmor: add abstractions to support the apparmor api 2012-10-20 01:19:22 -07:00
dovecot [1/3] dovecot profiles: introduce tunables/dovecot 2014-01-26 22:43:42 +01:00
global freedesktop.org abstraction: DRY by factorizing duplicated path components with variables. 2018-07-27 06:21:40 +00:00
home as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
kernelvars Make @{sys} available by default 2018-10-09 19:27:55 +03:00
multiarch Fix multi-arch comment tyop, thanks to Kees for pointing it out. 2011-03-23 13:44:51 -07:00
ntpd as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
proc as ACKed on IRC, drop the unused $Id$ tags everywhere 2010-12-20 12:29:10 -08:00
securityfs Make @{sys} available by default 2018-10-09 19:27:55 +03:00
share Make tunables/share play well with aliases. 2019-01-07 12:58:56 +00:00
sys Make @{sys} available by default 2018-10-09 19:27:55 +03:00
xdg-user-dirs = Background = 2014-02-14 16:24:52 -06:00