Current Dir: /snap/core22/2955/etc/apparmor.d/tunables/
[DIR] home.d [ delete | rename ]
[DIR] multiarch.d [ delete | rename ]
[DIR] xdg-user-dirs.d [ delete | rename ]
[FILE] alias [ edit | delete | rename ]
[FILE] apparmorfs [ edit | delete | rename ]
[FILE] dovecot [ edit | delete | rename ]
[FILE] etc [ edit | delete | rename ]
[FILE] global [ edit | delete | rename ]
[FILE] home [ edit | delete | rename ]
[FILE] kernelvars [ edit | delete | rename ]
[FILE] multiarch [ edit | delete | rename ]
[FILE] proc [ edit | delete | rename ]
[FILE] run [ edit | delete | rename ]
[FILE] securityfs [ edit | delete | rename ]
[FILE] share [ edit | delete | rename ]
[FILE] sys [ edit | delete | rename ]
[FILE] system [ edit | delete | rename ]
[FILE] xdg-user-dirs [ edit | delete | rename ]
Viewing: /snap/core22/2955/etc/apparmor.d/tunables/kernelvars
# Copyright (C) 2012 Canonical Ltd.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# This file should contain declarations to kernel vars or variables
# that will become kernel vars at some point
# until kernel vars are implemented
# and until the parser supports nested groupings like
# @{pid}=[1-9]{[0-9]{[0-9]{[0-9]{[0-9]{[0-9],},},},},}
# use
@{pid}={[1-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9]}
#same pattern as @{pid} for now
@{tid}=@{pid}
#A pattern for pids that can appear
@{pids}=@{pid}
# Placeholder for user id until kernel var is implemented to match
# current user of the confined application.
# Values are 0...4,294,967,295 (32-bit unsigned, 10 digits).
@{uid}={[0-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]}
#same pattern as @{uid} for now
@{uids}=@{uid}
# until kernel var is implemented
@{sys}=/sys/