apparmor/profiles/apparmor.d/tunables
Christian Boltz 5657799dc7
Add include if exists <tunables/$FILE.d> to all tunables
(except the deprecated tunables/sys)

This allows users to extend variables without editing the main tunables
files.

It also allows to cleanly introduce new tunable files (via
tunables/global.d) and new aliases (via tunables/alias.d).

Note: some files already had `include <tunables/$FILE.d>`. These get
changed to `include if exists`, and the comments for these includes get
unified.

Fixes: https://gitlab.com/apparmor/apparmor/-/issues/347
2023-07-30 00:47:34 +02:00
..
home.d make note of the trailing slash requirement in the home.d/site.local example 2010-01-05 15:43:32 -08:00
multiarch.d Author: Jamie Strandboge <jamie@canonical.com>, 2011-03-23 12:24:11 -07:00
xdg-user-dirs.d = Background = 2014-02-14 16:24:52 -06:00
alias Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
apparmorfs Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
dovecot Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
etc Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
global Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
home Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
kernelvars Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
multiarch Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
ntpd Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
proc Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
run Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
securityfs Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
share Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00
sys Make @{sys} available by default 2018-10-09 19:27:55 +03:00
xdg-user-dirs Add include if exists <tunables/$FILE.d> to all tunables 2023-07-30 00:47:34 +02:00