apparmor: mesmo perfil para vários aplicativos

Question

então eu tenho:

#include <tunables/global>

/usr/bin/python2.7 {
    /** mixrw,
    deny /** lwk,
}

/usr/lib/jvm/java-6-openjdk/jre/bin/java {
    /** mixrw,
    deny /** lwk,
}

/var/www/service/usercode/*/a.out {
    /** mixrw,
    #deny /** lwk,
}

Como eu poderia fazer algo assim:

#include <tunables/global>

/usr/bin/python2.7 
/usr/lib/jvm/java-6-openjdk/jre/bin/java
/var/www/service/usercode/*/a.out
{
    /** mixrw,
    deny /** lwk,
}

    

Answer 1

#include <tunables/global>

/usr/bin/python2.7 {
#include <abstractions/mystuff1>
}

/usr/lib/jvm/java-6-openjdk/jre/bin/java {
#include <abstractions/mystuff1>
}

/var/www/service/usercode/*/a.out {
#include <abstractions/mystuff1>
}

(e depois colocar coisas comuns em abstractions/mystuff1 , claro)