apparmor/profiles
intrigeri a91d199ab1 Make tunables/share play well with aliases.
This reverts commit aa3022208f.

Space-separated list of values don't play well with aliases.
For example, in Tails, despite this alias rule:

  alias / -> /lib/live/mount/rootfs/*.squashfs/,

… the Tor Browser profile denies access to
/lib/live/mount/rootfs/filesystem.squashfs/usr/share/mime/mime.cache, which
should be equivalent to /usr/share/mime/mime.cache. That's fixed by using
alternations instead; too bad they're less readable.

Possibly related:
https://bugs.launchpad.net/apparmor/+bug/888077
https://bugs.launchpad.net/apparmor/+bug/1703692
https://bugs.launchpad.net/apparmor/+bug/1703692
2019-01-07 12:58:56 +00:00
..
apparmor/profiles/extras dhcpd: Support correct path for lease file on IPv6 2018-12-18 01:38:55 +01:00
apparmor.d Make tunables/share play well with aliases. 2019-01-07 12:58:56 +00:00
Makefile profiles/Makefile: test abstractions against apparmor_parser 2018-10-17 20:05:51 +03:00