mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 10:07:12 +00:00
- set filetype, instead of syntax, in vim modelines - replace filetype of subdomain with apparmor - move modelines in the first or last five lines of each file so that vim can recognize them
30 lines
530 B
Plaintext
30 lines
530 B
Plaintext
#
|
|
# Example usage for a program named 'foo' which is installed in /opt/foo
|
|
# $ aa-easyprof --template=sandbox \
|
|
# --template-var="@{APPNAME}=foo" \
|
|
# --policy-groups=opt-application,user-application \
|
|
# /opt/foo/bin/foo
|
|
#
|
|
###ENDUSAGE###
|
|
# AppArmor policy for ###NAME###
|
|
|
|
#include <tunables/global>
|
|
|
|
###VAR###
|
|
|
|
###PROFILEATTACH### {
|
|
#include <abstractions/base>
|
|
/ r,
|
|
/**/ r,
|
|
/usr/** r,
|
|
|
|
###ABSTRACTIONS###
|
|
|
|
###POLICYGROUPS###
|
|
|
|
###READS###
|
|
|
|
###WRITES###
|
|
}
|
|
# vim:ft=apparmor
|