aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/tunables
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
commit83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch)
tree19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/tunables
parent51d43498b07dc97d795947964534f0903cd05db5 (diff)
downloadbin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz
bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/tunables')
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/alias19
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/apparmorfs14
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/dovecot22
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/etc28
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/global27
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/home24
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/home.d/site.local13
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/home.d/ubuntu7
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/kernelvars36
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/multiarch16
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/multiarch.d/site.local14
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/proc15
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/run4
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/securityfs13
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/share18
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/sys9
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/system99
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs23
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs.d/site.local21
19 files changed, 0 insertions, 422 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/alias b/straper/db/public/apparmor/apparmor.d/tunables/alias
deleted file mode 100644
index 15385aa..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/alias
+++ /dev/null
@@ -1,19 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2010 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# Alias rules can be used to rewrite paths and are done after variable
-# resolution. For example, if '/usr' is on removable media:
-# alias /usr/ -> /mnt/usr/,
-#
-# Or if mysql databases are stored in /home:
-# alias /var/lib/mysql/ -> /home/mysql/,
-
-# Also, include files in tunables/alias.d for site-specific adjustments
-include if exists <tunables/alias.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/apparmorfs b/straper/db/public/apparmor/apparmor.d/tunables/apparmorfs
deleted file mode 100644
index ff30e8f..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/apparmorfs
+++ /dev/null
@@ -1,14 +0,0 @@
-# Copyright (C) 2012 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-include <tunables/securityfs>
-
-@{apparmorfs}=@{securityfs}/apparmor/
-
-# Also, include files in tunables/apparmorfs.d for site-specific adjustments
-include if exists <tunables/apparmorfs.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/dovecot b/straper/db/public/apparmor/apparmor.d/tunables/dovecot
deleted file mode 100644
index 6779a9a..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/dovecot
+++ /dev/null
@@ -1,22 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2013 Christian Boltz
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-# vim:ft=apparmor
-
-# @{DOVECOT_MAILSTORE} is a space-separated list of all directories
-# where dovecot is allowed to store and read mails
-#
-# The default value is quite broad to avoid breaking existing setups.
-# Please change @{DOVECOT_MAILSTORE} to (only) contain the directory
-# you use, and remove everything else.
-
-@{DOVECOT_MAILSTORE}=@{HOME}/Maildir/ @{HOME}/mail/ @{HOME}/Mail/ /var/vmail/ /var/mail/ /var/spool/mail/
-
-# Also, include files in tunables/dovecot.d for site-specific adjustments
-include if exists <tunables/dovecot.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/etc b/straper/db/public/apparmor/apparmor.d/tunables/etc
deleted file mode 100644
index 353cb57..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/etc
+++ /dev/null
@@ -1,28 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2020 Christian Boltz
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# @{etc_ro} contains a space-separated list of the system configuration directories.
-# Traditionally this means /etc/, but when using a read-only / filesystem and/or
-# with the goal of having only user-modified config files in /etc/, directories
-# like /usr/etc/ get introduced for storing the default config.
-
-# @{etc_ro} contains directories with configuration files, including read-only directories.
-# Do not use @{etc_ro} in rules that allow write access.
-@{etc_ro}=/etc/ /usr/etc/
-
-# @{etc_rw} contains directories where writing to configuration files is allowed.
-# @{etc_rw} should always be a subset of @{etc_ro}.
-#
-# Only use @{etc_rw} if the profile allows writing to a configuration file.
-# For rules that only allows read access, use @{etc_ro}.
-@{etc_rw}=/etc/
-
-# Also, include files in tunables/etc.d for site-specific adjustments
-include if exists <tunables/etc.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/global b/straper/db/public/apparmor/apparmor.d/tunables/global
deleted file mode 100644
index 70e8864..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/global
+++ /dev/null
@@ -1,27 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2006-2009 Novell/SUSE
-# Copyright (C) 2010-2014 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# All the tunables definitions that should be available to every profile
-# should be included here
-
-include <tunables/home>
-include <tunables/multiarch>
-include <tunables/proc>
-include <tunables/alias>
-include <tunables/kernelvars>
-include <tunables/system>
-include <tunables/xdg-user-dirs>
-include <tunables/share>
-include <tunables/etc>
-include <tunables/run>
-
-# Also, include files in tunables/global.d for site-specific adjustments
-include if exists <tunables/global.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/home b/straper/db/public/apparmor/apparmor.d/tunables/home
deleted file mode 100644
index 468adb3..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/home
+++ /dev/null
@@ -1,24 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2006-2009 Novell/SUSE
-# Copyright (C) 2010 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# @{HOMEDIRS} is a space-separated list of where user home directories
-# are stored, for programs that must enumerate all home directories on a
-# system.
-@{HOMEDIRS}=/home/
-
-# @{HOME} is a space-separated list of all user home directories. While
-# it doesn't refer to a specific home directory (AppArmor doesn't
-# enforce discretionary access controls) it can be used as if it did
-# refer to a specific home directory
-@{HOME}=@{HOMEDIRS}/*/ /root/
-
-# Also, include files in tunables/home.d for site-specific adjustments
-include if exists <tunables/home.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/home.d/site.local b/straper/db/public/apparmor/apparmor.d/tunables/home.d/site.local
deleted file mode 100644
index e6796a0..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/home.d/site.local
+++ /dev/null
@@ -1,13 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2010 Canonical Ltd.
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# The following is a space-separated list of where additional user home
-# directories are stored, each must have a trailing '/'. Directories added
-# here are appended to @{HOMEDIRS}. See tunables/home for details. Eg:
-#@{HOMEDIRS}+=/srv/nfs/home/ /mnt/home/
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/home.d/ubuntu b/straper/db/public/apparmor/apparmor.d/tunables/home.d/ubuntu
deleted file mode 100644
index 32db092..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/home.d/ubuntu
+++ /dev/null
@@ -1,7 +0,0 @@
-# This file is auto-generated. It is recommended you update it using:
-# $ sudo dpkg-reconfigure apparmor
-#
-# The following is a space-separated list of where additional user home
-# directories are stored, each must have a trailing '/'. Directories added
-# here are appended to @{HOMEDIRS}. See tunables/home for details.
-#@{HOMEDIRS}+=
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/kernelvars b/straper/db/public/apparmor/apparmor.d/tunables/kernelvars
deleted file mode 100644
index 0edd9e0..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/kernelvars
+++ /dev/null
@@ -1,36 +0,0 @@
-# Copyright (C) 2012 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# This file should contain declarations to kernel vars or variables
-# that will become kernel vars at some point
-
-# until kernel vars are implemented
-# and until the parser supports nested groupings like
-# @{pid}=[1-9]{[0-9]{[0-9]{[0-9]{[0-9]{[0-9],},},},},}
-# use
-@{pid}={[1-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9]}
-
-#same pattern as @{pid} for now
-@{tid}=@{pid}
-
-#A pattern for pids that can appear
-@{pids}=@{pid}
-
-# Placeholder for user id until kernel var is implemented to match
-# current user of the confined application.
-# Values are 0...4,294,967,295 (32-bit unsigned, 10 digits).
-@{uid}={[0-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]}
-
-#same pattern as @{uid} for now
-@{uids}=@{uid}
-
-# until kernel var is implemented
-@{sys}=/sys/
-
-# Also, include files in tunables/kernelvars.d for site-specific adjustments
-include if exists <tunables/kernelvars.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/multiarch b/straper/db/public/apparmor/apparmor.d/tunables/multiarch
deleted file mode 100644
index 5075e8d..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/multiarch
+++ /dev/null
@@ -1,16 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2010 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# @{multiarch} is the set of patterns matching multi-arch library
-# install prefixes.
-@{multiarch}=*-linux-gnu*
-
-# Also, include files in tunables/multiarch.d for site-specific adjustments
-include if exists <tunables/multiarch.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/multiarch.d/site.local b/straper/db/public/apparmor/apparmor.d/tunables/multiarch.d/site.local
deleted file mode 100644
index 91877e2..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/multiarch.d/site.local
+++ /dev/null
@@ -1,14 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2011 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# The following is a space-separated list of where additional multipath
-# prefixes are stored, each should not have a trailing '/'. Directories
-# added here are appended to @{multiarch}. See tunables/mutliarch for details. Eg:
-#@{multiarch}+=*-freebsd* s390-hurd-zomg
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/proc b/straper/db/public/apparmor/apparmor.d/tunables/proc
deleted file mode 100644
index a0e4b50..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/proc
+++ /dev/null
@@ -1,15 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2006 Novell/SUSE
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# @{PROC} is the location where procfs is mounted.
-@{PROC}=/proc/
-
-# Also, include files in tunables/proc.d for site-specific adjustments
-include if exists <tunables/proc.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/run b/straper/db/public/apparmor/apparmor.d/tunables/run
deleted file mode 100644
index 5a5b97b..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/run
+++ /dev/null
@@ -1,4 +0,0 @@
-@{run}=/run/ /var/run/
-
-# Also, include files in tunables/run.d for site-specific adjustments
-include if exists <tunables/run.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/securityfs b/straper/db/public/apparmor/apparmor.d/tunables/securityfs
deleted file mode 100644
index 652f92d..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/securityfs
+++ /dev/null
@@ -1,13 +0,0 @@
-# Copyright (C) 2012 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# @{securityfs} is the location where securityfs is mounted.
-@{securityfs}=@{sys}/kernel/security/
-
-# Also, include files in tunables/securityfs.d for site-specific adjustments
-include if exists <tunables/securityfs.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/share b/straper/db/public/apparmor/apparmor.d/tunables/share
deleted file mode 100644
index 8aa5fba..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/share
+++ /dev/null
@@ -1,18 +0,0 @@
-@{flatpak_exports_root} = {flatpak/exports,flatpak/{app,runtime}/*/*/*/*/export}
-
-# System-wide directories with behaviour analogous to /usr/share
-# in patterns like the freedesktop.org basedir spec. These are
-# owned by root or a system user, appear in XDG_DATA_DIRS, and
-# are the parent directory for `applications`, `themes`,
-# `dbus-1/services`, etc.
-@{system_share_dirs} = /{usr,usr/local,var/lib/@{flatpak_exports_root}}/share
-
-# Per-user/personal directories with behaviour analogous to
-# ~/.local/share in patterns like the freedesktop.org basedir spec.
-# These are owned by the user running an application, appear in
-# XDG_DATA_DIRS or XDG_DATA_HOME, and are the parent directory
-# for the same subdirectories as @{system_share_dirs}
-@{user_share_dirs} = @{HOME}/.local{,/share/@{flatpak_exports_root}}/share
-
-# Also, include files in tunables/share.d for site-specific adjustments
-include if exists <tunables/share.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/sys b/straper/db/public/apparmor/apparmor.d/tunables/sys
deleted file mode 100644
index c5257e3..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/sys
+++ /dev/null
@@ -1,9 +0,0 @@
-# Copyright (C) 2012 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-#This file is DEPRECATED! @{sys} is defined in tunables/kernelvars now.
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/system b/straper/db/public/apparmor/apparmor.d/tunables/system
deleted file mode 100644
index 2b5e6cc..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/system
+++ /dev/null
@@ -1,99 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# Any digit
-@{d}=[0-9]
-
-# Any letter
-@{l}=[a-zA-Z]
-
-# Single alphanumeric character
-@{c}=[0-9a-zA-Z]
-
-# Word character: matches any letter, digit or underscore.
-@{w}=[a-zA-Z0-9_]
-
-# Single hexadecimal character
-@{h}=[0-9a-fA-F]
-
-# Integer up to 10 digits (0-9999999999)
-@{int}=@{d}{@{d},}{@{d},}{@{d},}{@{d},}{@{d},}{@{d},}{@{d},}{@{d},}{@{d},}
-
-# hexadecimal, alphanumeric and word up to 64 characters
-@{hex}=@{h}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}{@{h},}
-@{rand}=@{c}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}{@{c},}
-@{word}=@{w}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}{@{w},}
-
-# Unsigned integer over 8 bits (0...255)
-@{u8}=[0-9]{[0-9],} 1[0-9][0-9] 2[0-4][0-9] 25[0-5]
-
-# Unsigned integer over 16 bits (0...65,535 5 digits)
-@{u16}={@{d},[1-9]@{d},[1-9][@{d}@{d},[1-9]@{d}@{d}@{d},[1-6]@{d}@{d}@{d}@{d}}
-
-# Unsigned integer over 32 bits (0...4,294,967,295 10 digits)
-@{u32}={@{d},[1-9]@{d},[1-9]@{d}@{d},[1-9]@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-4]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}}
-
-# Unsigned integer over 64 bits (0...18,446,744,073,709,551,615 20 digits).
-@{u64}={@{d},[1-9]@{d},[1-9]@{d}@{d},[1-9]@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},[1-9]@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d},1@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}@{d}}
-
-# Any x digits characters
-@{int2}=@{d}@{d}
-@{int4}=@{int2}@{int2}
-@{int6}=@{int4}@{int2}
-@{int8}=@{int4}@{int4}
-@{int9}=@{int8}@{d}
-@{int10}=@{int8}@{int2}
-@{int12}=@{int8}@{int4}
-@{int15}=@{int8}@{int4}@{int2}@{d}
-@{int16}=@{int8}@{int8}
-@{int32}=@{int16}@{int16}
-@{int64}=@{int32}@{int32}
-
-# Any x hexadecimal characters
-@{hex2}=@{h}@{h}
-@{hex4}=@{hex2}@{hex2}
-@{hex6}=@{hex4}@{hex2}
-@{hex8}=@{hex4}@{hex4}
-@{hex9}=@{hex8}@{h}
-@{hex10}=@{hex8}@{hex2}
-@{hex12}=@{hex8}@{hex4}
-@{hex15}=@{hex8}@{hex4}@{hex2}@{h}
-@{hex16}=@{hex8}@{hex8}
-@{hex32}=@{hex16}@{hex16}
-@{hex38}=@{hex32}@{hex6}
-@{hex64}=@{hex32}@{hex32}
-
-# Any x alphanumeric characters
-@{rand2}=@{c}@{c}
-@{rand4}=@{rand2}@{rand2}
-@{rand6}=@{rand4}@{rand2}
-@{rand8}=@{rand4}@{rand4}
-@{rand9}=@{rand8}@{c}
-@{rand10}=@{rand8}@{rand2}
-@{rand12}=@{rand8}@{rand4}
-@{rand15}=@{rand8}@{rand4}@{rand2}@{c}
-@{rand16}=@{rand8}@{rand8}
-@{rand32}=@{rand16}@{rand16}
-@{rand64}=@{rand32}@{rand32}
-
-# Any x word characters
-@{word2}=@{w}@{w}
-@{word4}=@{word2}@{word2}
-@{word6}=@{word4}@{word2}
-@{word8}=@{word4}@{word4}
-@{word9}=@{word8}@{w}
-@{word10}=@{word8}@{word2}
-@{word12}=@{word8}@{word4}
-@{word15}=@{word8}@{word4}@{word2}@{w}
-@{word16}=@{word8}@{word8}
-@{word32}=@{word16}@{word16}
-@{word64}=@{word32}@{word32}
-
-include if exists <tunables/system.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs b/straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs
deleted file mode 100644
index a73f4d7..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs
+++ /dev/null
@@ -1,23 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2014 Canonical Ltd.
-#
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# Define the common set of XDG user directories (usually defined in
-# /etc/xdg/user-dirs.defaults)
-@{XDG_DESKTOP_DIR}="Desktop"
-@{XDG_DOWNLOAD_DIR}="Downloads"
-@{XDG_TEMPLATES_DIR}="Templates"
-@{XDG_PUBLICSHARE_DIR}="Public"
-@{XDG_DOCUMENTS_DIR}="Documents"
-@{XDG_MUSIC_DIR}="Music"
-@{XDG_PICTURES_DIR}="Pictures"
-@{XDG_VIDEOS_DIR}="Videos"
-
-# Also, include files in tunables/xdg-user-dirs.d for site-specific adjustments
-include if exists <tunables/xdg-user-dirs.d>
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs.d/site.local b/straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs.d/site.local
deleted file mode 100644
index 8fcabfa..0000000
--- a/straper/db/public/apparmor/apparmor.d/tunables/xdg-user-dirs.d/site.local
+++ /dev/null
@@ -1,21 +0,0 @@
-# ------------------------------------------------------------------
-#
-# Copyright (C) 2014 Canonical Ltd.
-# This program is free software; you can redistribute it and/or
-# modify it under the terms of version 2 of the GNU General Public
-# License published by the Free Software Foundation.
-#
-# ------------------------------------------------------------------
-
-# The following may be used to add additional entries such as for
-# translations. See tunables/xdg-user-dirs for details. Eg:
-#@{XDG_MUSIC_DIR}+="Musique"
-
-#@{XDG_DESKTOP_DIR}+=""
-#@{XDG_DOWNLOAD_DIR}+=""
-#@{XDG_TEMPLATES_DIR}+=""
-#@{XDG_PUBLICSHARE_DIR}+=""
-#@{XDG_DOCUMENTS_DIR}+=""
-#@{XDG_MUSIC_DIR}+=""
-#@{XDG_PICTURES_DIR}+=""
-#@{XDG_VIDEOS_DIR}+=""