apparmor.d/apparmor.d/abstractions/user-read-all
2024-02-11 20:02:38 +01:00

16 lines
580 B
Text

# apparmor.d - Full set of apparmor profiles
# SPDX-License-Identifier: GPL-2.0-only
# This abstraction provides safe read access to all directories
# that commonly include user owned files as referenced by the
# filesystem hierarchy standard. Hidden files in $HOME are excluded
# To make this the default permission for all profiles that already
# include the more restrictive user-read abstraction, copy this file
# into the user-read.d directory
owner @{HOME}/ r,
owner @{HOME}/[^.]** r,
owner @{MOUNTDIRS}/{,**} r,
include if exists <abstractions/user-read-all.d>