On 2017-12-02 01:26, Seth Arnold wrote:
So a rule such as
/{media,mnt,srv,wherever/mounts/are}/ r,
would be useful.
Thanks for fixing this!
But.. wait...
There are rules for browsing all directories and reading from common mount
points in abstractions/totem already:
/**/ r, [1]
/{media,mnt,opt,srv}/** r, [0]
So probably reporter Philip has hit a deny on some over path.
[0]
https://anonscm.debian.org/cgit/collab-maint/apparmor-profiles-extra.git/tree/profiles/abstractions/totem#n24
[1]
https://anonscm.debian.org/cgit/collab-maint/apparmor-profiles-extra.git/tree/profiles/abstractions/totem#n29
