Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

In my system I made an encrypted ~/Private directory by ecryptfs-utils package. It works good, but I have a problem with apparmor.

Into the Private folder I moved some home directories, like .local, .mozilla, .config, etc... and obviously I link these to my home root.

Everything works, except some apparmor profile (like telepathy) because it does not recognize the new path as a valid path: The message is similar to this:

[19753.442963] type=1400 audit(1393681049.447:322): apparmor="DENIED" operation="open" parent=1 profile="/usr/lib/telepathy/mission-control-5" name="/home/-my-home-troot-/Private/.config/dconf/user" pid=23758 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

Of course changing the single profile made apparmor recognize new folders, but I wanted to try a more general solution, so I tried to change /etc/apparmor.d/tunables/alias, but without results.

  • My question: Is it possible, to adapt all apparmor profiles in a general way, in order to adapt apparmor to new changes, introduced by moving some 'system' folder into the encrypted ~/Private directory?

Many thanks in advance!

share|improve this question
I found a possible solution updating the file /etc/apparmor.d/tunables/home and change the line @{HOME}=@{HOMEDIRS}/*/ /root/ with the new line @{HOME}=@{HOMEDIRS}/*/ @{HOMEDIRS}/*/Private/ /root/ I don't know if it is the optimal solution but seem to work on my system –  henry Mar 3 '14 at 12:44

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.