[apparmor] Some profiles

Simon Deziel simon.deziel at gmail.com
Mon Mar 11 17:22:49 UTC 2013


On 13-03-11 01:12 PM, "Артём Н." wrote:
> I can't found profiles for some programs, which I use.
> I use Debian OS and make profiles for it, but I hope, if they will be included
> in ubuntu packages, one time they will migrate from ubuntu to Debian. :-)
> 
> And I have some questions, for example: can I allow access to the file, if I
> deny it earlier?

deny rules have precedence regardless of the order of appearance.


> Fix for the usr/sbin/unbound:
>   /{,var/}run/unbound.pid         rw,

This expands to:

/run/unbound.pid             rw,
/var/run/unbound.pid         rw,

> +  /run/unbound.pid                rw,

So this one is unneeded.

Regards,
Simon




More information about the AppArmor mailing list