Comment 5 for bug 573787

Revision history for this message
Samuel Leathers (saml) wrote :

After studying apparmor, I would say this really isn't a bug but a feature. The only bug would be adding documentation for how to use apparmor with non-standard home directories:

create a file /etc/apparmor.d/tunables/home.d/custom

with the contents:

@{HOMEDIRS}+=<YOUR_HOME_DIR_PREFIX>

note: custom could be any name, because by default, it sources all files in that directory

for example, I have a little more complex environment, where I have a base /astro that's an auto-mount from ldap, and then users type/username, so for my tunable file I use the following line:

@{HOMEDIRS}+=/astro/*/

Where a users home directory would be for example /astro/staff/abc123

Sam