diff --git a/apparmor.d/abstractions/user-read-all b/apparmor.d/abstractions/user-read-all index 1a218eb1b..b8f6d2a35 100644 --- a/apparmor.d/abstractions/user-read-all +++ b/apparmor.d/abstractions/user-read-all @@ -1,12 +1,16 @@ - apparmor.d - Full set of apparmor profiles +# apparmor.d - Full set of apparmor profiles # SPDX-License-Identifier: GPL-2.0-only # This abstraction provides safe read access to all directories # that commonly include user owned files as referenced by the # filesystem hierarchy standard. Hidden files in $HOME are excluded +# To make this the default permission for all profiles that already +# include the more restrictive user-read abstraction, copy this file +# into the user-read.d directory + owner @{HOME}/ r, owner @{HOME}/[^.]** r, owner @{MOUNTDIRS}/{,**} r, -include if exists +include if exists