# apparmor.d - Full set of apparmor profiles
# SPDX-License-Identifier: GPL-2.0-only

# This abstraction provides safe read access to all directories
# that commonly include user owned files as referenced by the 
# filesystem hierarchy standard. Hidden files in $HOME are excluded

# To make this the default permission for all profiles that already
# include the more restrictive user-read abstraction, copy this file
# into the user-read.d directory

  owner @{HOME}/ r,
  owner @{HOME}/[^.]**  r,
  owner @{MOUNTDIRS}/{,**} r,

include if exists <abstractions/user-read-all.d>