aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/tunables/home
diff options
context:
space:
mode:
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/tunables/home')
-rw-r--r--straper/db/public/apparmor/apparmor.d/tunables/home24
1 files changed, 24 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/tunables/home b/straper/db/public/apparmor/apparmor.d/tunables/home
new file mode 100644
index 0000000..468adb3
--- /dev/null
+++ b/straper/db/public/apparmor/apparmor.d/tunables/home
@@ -0,0 +1,24 @@
+# ------------------------------------------------------------------
+#
+# Copyright (C) 2006-2009 Novell/SUSE
+# Copyright (C) 2010 Canonical Ltd.
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of version 2 of the GNU General Public
+# License published by the Free Software Foundation.
+#
+# ------------------------------------------------------------------
+
+# @{HOMEDIRS} is a space-separated list of where user home directories
+# are stored, for programs that must enumerate all home directories on a
+# system.
+@{HOMEDIRS}=/home/
+
+# @{HOME} is a space-separated list of all user home directories. While
+# it doesn't refer to a specific home directory (AppArmor doesn't
+# enforce discretionary access controls) it can be used as if it did
+# refer to a specific home directory
+@{HOME}=@{HOMEDIRS}/*/ /root/
+
+# Also, include files in tunables/home.d for site-specific adjustments
+include if exists <tunables/home.d>