From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Fri, 20 Mar 2026 19:16:32 +0100 Subject: feat: first fully successful run e2e on straper --- .../db/public/apparmor/apparmor.d/tunables/home | 24 ++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 straper/db/public/apparmor/apparmor.d/tunables/home (limited to 'straper/db/public/apparmor/apparmor.d/tunables/home') diff --git a/straper/db/public/apparmor/apparmor.d/tunables/home b/straper/db/public/apparmor/apparmor.d/tunables/home new file mode 100644 index 0000000..468adb3 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/tunables/home @@ -0,0 +1,24 @@ +# ------------------------------------------------------------------ +# +# Copyright (C) 2006-2009 Novell/SUSE +# Copyright (C) 2010 Canonical Ltd. +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of version 2 of the GNU General Public +# License published by the Free Software Foundation. +# +# ------------------------------------------------------------------ + +# @{HOMEDIRS} is a space-separated list of where user home directories +# are stored, for programs that must enumerate all home directories on a +# system. +@{HOMEDIRS}=/home/ + +# @{HOME} is a space-separated list of all user home directories. While +# it doesn't refer to a specific home directory (AppArmor doesn't +# enforce discretionary access controls) it can be used as if it did +# refer to a specific home directory +@{HOME}=@{HOMEDIRS}/*/ /root/ + +# Also, include files in tunables/home.d for site-specific adjustments +include if exists -- cgit v1.3