[apparmor] RFC: using variables to make profiles more flexible

Vincas Dargis vindrg at gmail.com
Mon Dec 4 18:37:41 UTC 2017


On 2017-12-04 20:04, John Johansen wrote:>> This would allow user to extend `@{totem_extra_read_dirs}` for his own use 
case, maybe ever overwrite (is this possible?) with `=` instead of `+=`, if he does not like access to default 
media/mnt/opt/srv paths.
>>
> sorry no overwriting is currently not supported

Could it be supported in the future at all, if order of definitions does not matter? I mean, this new feature could 
break things (start to override instead of extend).



More information about the AppArmor mailing list