Configuration

This project is designed in such a way that it is easy to personalize it to fit any system. It is mostly done by setting personalized XDG like directories in AppArmor tunables. More advanced configuration can be done by adding your own rules in local profile addition.

Personalize Apparmor¶

Tunables¶

The profiles heavily use the largely extended XDG directory variables. All the variables are list you can append with your own values.

1. First create the directory /etc/apparmor.d/tunables/xdg-user-dirs.d/apparmor.d.d:

   sudo mkdir -p /etc/apparmor.d/tunables/xdg-user-dirs.d/apparmor.d.d
   

2. Then create a local addition file in it where you define your own personal directories. Example:

   @{XDG_VIDEOS_DIR}+="Films"
   @{XDG_MUSIC_DIR}+="Musique"
   @{XDG_PICTURES_DIR}+="Images"
   @{XDG_BOOKS_DIR}+="BD" "Comics"
   @{XDG_PROJECTS_DIR}+="Git" "Papers"
   

3. Then restart the AppArmor service to reload the profiles in the kernel:

   sudo systemctl restart apparmor.service
   

Profile Additions¶

You can extend any profile with your own rules by creating a file in the /etc/apparmor.d/local/ directory with the name of the profile you want to personalize.

Example

By default, nautilus (and any file browser) only allows access to user files. Thus, your cannot browse system files such as /etc/, /srv/, /var/. You can change this behaviour by creating a local profile addition file for nautilus:

1. Create the file /etc/apparmor.d/local/nautilus and add the following rules in it:

     /** r,
   

   You call also restrict this to specific directories:

     /etc/** r,
     /srv/** r,
     /var/** r,
   

2. Then restart the AppArmor service to reload the profiles in the kernel:

   sudo systemctl restart apparmor.service
   

XDG variables¶

Please ensure that all personal directories you are using are well-defined XDG directory defined below. If not, personalize the variables to your own settings.

System variables can also be personalized, they are defined in the Variables Reference page.

Program Personalization¶

Examples¶

All profiles use the variables defined above. Therefore, you can personalize them by setting your own values in /etc/apparmor.d/tunables/xdg-user-dirs.d/apparmor.d.d/local.

• For git support, you may want to add your GO_PATH in the XDG_PROJECTS_DIR:

  @{XDG_PROJECTS_DIR}+="go"
  

• If you use Keepass, personalize XDG_PASSWORD_STORE_DIR with your password directory. Eg:

  @{XDG_PASSWORD_STORE_DIR}+="@{HOME}/.keepass/"
  

• Add pacman integration with your AUR helper. Eg for yay:

  @{user_pkg_dirs}+=@{user_cache_dirs}/yay/
  

Mount points¶

Common mount points are defined in the @{MOUNTS} variable. If you mount a disk on a different location, you can add it to the @{MOUNTS} variable.

Example

If you mount a disk on /ssd/, add the following to /etc/apparmor.d/tunables/xdg-user-dirs.d/apparmor.d.d/local:

@{MOUNT}+=/ssd/

File browsers¶

All supported file browsers (nautilus, dolphin, thunar) are configured to only access user files. If you want to allow access to system files, you can create a local profile addition file for the file browser you are using.

Games¶

In order to not allow access to user data, game profiles use the @{XDG_GAMESSTUDIO_DIR} variable. It may need to be expanded with other game studio directory. The default is @{XDG_GAMESSTUDIO_DIR}="unity3d".

The @{XDG_GAMES_DIR} variable is used to define the game directory such as steam storage directory. If your steam storage is on another drive, you should personalize @{user_games_dirs} instead.