AppArmor support for the XDG Base Directory spec is incomplete
Bug #1423890 reported by
Sergio Gelato
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| apparmor (Ubuntu) |
New
|
Wishlist
|
Unassigned | ||
Bug Description
Based on the version of apparmor in trusty-updates:
Various profiles grant permissions for files in @{HOME}/.cache/. This is only sufficient as long as one hasn't set the environment variable XDG_CACHE_HOME to point somewhere else. (Use case: store caches locally when home directories are on a remote fileserver.)
I'd suggest defining a new tunable
@{XDG_CACHE_
which local administrators could augment as needed (e.g.,
@{XDG_CACHE_
or whatever the local convention may be).
Similar treatment may be needed for the other environment variables mentioned in the XDG basedir spec:
XDG_CONFIG_HOME for @{HOME}/.config
XDG_DATA_HOME for @{HOME}
Revision history for this message
| Seth Arnold (seth-arnold) wrote | #1 |
| Changed in apparmor (Ubuntu): | |
| importance: | Undecided → Wishlist |
To post a comment you must log in.
Some discussion on xdg paths has happened here, https:/