In my system I made an encrypted
~/Private directory by ecryptfs-utils package. It works good, but I have a problem with apparmor.
Into the Private folder I moved some home directories, like
.config, etc... and obviously I link these to my
Everything works, except some apparmor profile (like telepathy) because it does not recognize the new path as a valid path: The message is similar to this:
[19753.442963] type=1400 audit(1393681049.447:322): apparmor="DENIED" operation="open" parent=1 profile="/usr/lib/telepathy/mission-control-5" name="/home/-my-home-troot-/Private/.config/dconf/user" pid=23758 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Of course changing the single profile made apparmor recognize new folders, but I wanted to try a more general solution, so I tried to change
/etc/apparmor.d/tunables/alias, but without results.
- My question: Is it possible, to adapt all apparmor profiles in a general way, in order to adapt apparmor to new changes, introduced by moving some 'system' folder into the encrypted
Many thanks in advance!