Better tunables definitions.
This commit is contained in:
parent
9eecac80a2
commit
b65955d055
3 changed files with 56 additions and 19 deletions
15
apparmor.d/tunables/extend
Normal file
15
apparmor.d/tunables/extend
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Extended systemd directories definition
|
||||
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
# To allow extended personalisation without breaking everything.
|
||||
# All apparmor profiles should always use the variables defined here.
|
||||
|
||||
# Common mountpoints
|
||||
@{MOUNTS}=/media/ @{run}/media /mnt
|
||||
|
||||
# Libexec path. Different in some distribution
|
||||
@{libexec}=/usr/lib
|
||||
|
||||
include if exists <tunables/extend.d>
|
||||
Loading…
Add table
Add a link
Reference in a new issue