Comment 20 for bug 1433165

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Alan, those are some surprising errors. It looks a lot like you've got / symlinked to /mnt/stoarge0/ or something else similar.

If so, you'd probably be better served with a rule like:

alias / -> /mnt/storage0/,

in the /etc/apparmor.d/tunables/alias file.

Then you could clean up the @{HOME} variable to only the paths actually used for home directories (the dpkg-reconfigure apparmor question) and drastically tighten the security policy while also allowing the accesses that need to happen.

Thanks