[apparmor] Apparmor: Profile optimization

[Murali Selvaraj]

Hi John/Seth,

Please clarify the below queries which we are looking for to define
the profiles for embedded devices.
Kindly do the needful.

Thanks
Murali.S

On Fri, Apr 16, 2021 at 11:18 PM Murali Selvaraj
<murali.selvaraj2003 at gmail.com> wrote:
>
> Hi All,
>
> We have observed few configuration files are present in /tmp which are
> needed for certain processes.
> For example, few of the files are hidden files located in /tmp/.
>
> In that case, shall we add below entry
>
> /tmp/** rw,
>
> or Do we need to add entries for file specific as below
>
> /tmp/file.txt r,
> /tmp/.init_complete rw,
>
> Which would be the best way for security concern especially for
> embedded devices ?
> Please advise.
>
> Thanks
> Murali.S