[apparmor] Patching a system profile for a specific user

azurit at pobox.sk azurit at pobox.sk
Sat Jan 11 10:40:55 UTC 2020


Citát Sylvain Leroux <sylvain at chicoree.fr>:

> Thanks azur,
>
> On 11/01/2020 08:25, azurit at pobox.sk wrote:
>> just put this in /etc/apparmor.d/local/usr.bin.thunderbird :
>> owner @{HOME}/.signature.d/** r,
>
>
> My issue is I don't want to change the system configuration.


This isnt' possible. That file is used to local changes only and won't  
be replaced with updates.



>  I would like to grant the extra permission *only* for the user that  
> needs it.

So do this:

owner /home/specific_user/.signature.d/** r,





More information about the AppArmor mailing list