[apparmor] lightdm profile from a apparmor.d/abstractions directory.

[Daniel Curtis]

Hi

I just want to ask if can I use e.g. *lightdm** profile from
</etc/apparmor.d/abstractions/> directory? Can I put it in a
enforce mode? I'm aksing, because I've noticed that "default"
*lightdm-guest-session* profile on Xubuntu 12.04 is... pretty
empty in comparison to that one from a <abstraction> directory.

Default *lightdm-guest-session *contain only a few lines:

# vim:syntax=apparmor
# Profile for restricting lightdm guest session

#include <tunables/global>
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper {
  # Most applications are confined via the main abstraction
  #include <abstractions/lightdm>
  # chromium-browser needs special confinement due to its sandboxing
  #include <abstractions/lightdm_chromium-browser>
}

when a lightdm profile, from <abstractions> directory is full of
policies. What should I do? Can I do that I want to do? Replace
profiles?

Best regards.
______________
* Profile for restricting lightdm guest session.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130804/60e3ffdc/attachment.html>