mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
5b92ef4b10
The parser.conf example statement for Include statements used /etc/apparmor.d/abstractions which is unlikely to make anyone enabling it happy as our shipped and example policies all include the 'abstractions/' directory in the relative paths. This patch adjusts the example and provides a second example, based on an enabled entry as shipped in Ubuntu. Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: Christian Boltz <apparmor@cboltz.de>
61 lines
1.4 KiB
Text
61 lines
1.4 KiB
Text
# parser.conf is a global AppArmor config file for the apparmor_parser
|
|
#
|
|
# It can be used to specify the default options for the parser, which
|
|
# can then be overriden by options passed on the command line.
|
|
#
|
|
# Leading whitespace is ignored and lines that begin with # are treated
|
|
# as comments.
|
|
#
|
|
# Config options are specified one per line using the same format as the
|
|
# longform command line options (without the preceding --).
|
|
#
|
|
# If a value is specified twice the last version to appear is used.
|
|
|
|
## Suppress Warnings
|
|
#quiet
|
|
|
|
## Be verbose
|
|
#verbose
|
|
|
|
## Set additional include path
|
|
#Include /etc/apparmor.d/
|
|
# or
|
|
#Include /usr/share/apparmor
|
|
|
|
|
|
## Set location of apparmor filesystem
|
|
#subdomainfs /sys/kernel/security/apparmor
|
|
|
|
## Set match-string to use - for forcing compiler to treat different kernels
|
|
## the same
|
|
# match-string "pattern=aadfa audit perms=crwxamlk/ user::other"
|
|
|
|
## Turn creating/updating of the cache on by default
|
|
#write-cache
|
|
|
|
## Show cache hits
|
|
#show-cache
|
|
|
|
## skip cached policy
|
|
#skip-cache
|
|
|
|
## skip reading cache but allow updating
|
|
#skip-read-cache
|
|
|
|
|
|
#### Set Optimizaions. Multiple Optimizations can be set, one per line ####
|
|
# For supported optimizations see
|
|
# apparmor_parser --help=O
|
|
|
|
## Turn on equivalence classes
|
|
#equiv
|
|
|
|
## Turn off expr tree simplification
|
|
#Optimize=no-expr-simplify
|
|
|
|
## Turn off DFA minimization
|
|
#Optimize=no-minimize
|
|
|
|
## Adjust compression
|
|
#Optimize=compress-small
|
|
#Optimize=compress-fast
|