[apparmor] Allow defaults except for reading a directory

[Ian Nicholson]

On 08/26/2012 11:58 AM, Ahmet Emre Aladağ wrote:
> Now I found the problem.
>
> When I use
> sh pycharm.sh, it doesn't work
>
> When I use
> ./pycharm.sh, it works! Access denied.
>
> Thank you very very much, it was very kind of you.
>
I ran into this myself yesterday, except with a python file. I assume
it's because running "python filename.py" causes apparmor to apply the
profile for the python interpreter, whereas running "./filename.py" will
cause apparmor to use the profile that I've created for the actual
script. Can anyone tell me if that's right?