Comment 5 for bug 1450168

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Mardy, AppArmor always allows directory execute access.

/foo/directory/ r, is needed to enumerate files in the directory.

/foo/directory/* r, is needed to access the files in the directory, regardless if the names were guessed or read via getdents(2).