AppArmor profile exchange
#include <tunables/global>
/etc/cron.daily/aide {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
capability chown,
capability dac_override,
capability fowner,
capability fsetid,
capability setgid,
capability setuid,
capability sys_ptrace,
/ r,
/bin/bash ixr,
/bin/cat ixr,
/bin/chgrp ixr,
/bin/chmod ixr,
/bin/chown ixr,
/bin/dash ixr,
/bin/date ixr,
/bin/dnsdomainname ixr,
/bin/grep ixr,
/bin/gzip ixr,
/bin/hostname ixr,
/bin/ln ixr,
/bin/ls ixmr,
/bin/mkdir ixr,
/bin/mv ixr,
/bin/rm ixr,
/bin/sed ixr,
/bin/touch ixr,
/bin/which ixr,
/dev/ r,
/dev/**/ r,
/dev/tty rw,
/etc/ r,
/etc/*/ r,
/etc/aide/aide.conf r,
/etc/aide/aide.conf.d/ r,
/etc/aide/aide.conf.d/* r,
/etc/aide/aide.conf.d/10_aide_hostname ixr,
/etc/aide/aide.conf.d/30_aide_apache2 ixr,
/etc/aide/aide.conf.d/30_inn2_vars ixr,
/etc/aide/aide.conf.d/31_aide_amanda-server ixr,
/etc/aide/aide.conf.d/31_aide_apt ixr,
/etc/aide/aide.conf.d/31_aide_ifupdown ixr,
/etc/aide/aide.conf.d/31_aide_torrus ixr,
/etc/aide/aide.conf.d/70_aide_dev ixr,
/etc/apt/sources.list r,
/etc/cron.daily/aide mr,
/etc/default/aide r,
/etc/dpkg/dpkg.cfg r,
/etc/mail.rc r,
/etc/mailname r,
/etc/postfix/* r,
/lib/ r,
/lib/modules/ r,
/proc/ r,
/proc/*/cmdline r,
/proc/*/mounts r,
/proc/*/stat r,
/proc/filesystems r,
/proc/meminfo r,
/root/ r,
/sbin/killall5 ixr,
/tmp/ rw,
/tmp/* rw,
/tmp/.ICE-unix/ r,
/tmp/.X11-unix/ r,
/usr/ r,
/usr/bin/aide ixr,
/usr/bin/aide.wrapper ixr,
/usr/bin/basename ixr,
/usr/bin/cut ixr,
/usr/bin/dirname ixr,
/usr/bin/dotlockfile ixr,
/usr/bin/dpkg ixr,
/usr/bin/dpkg-query ixr,
/usr/bin/expr ixr,
/usr/bin/find ixr,
/usr/bin/getopt ixr,
/usr/bin/head ixr,
/usr/bin/logger ixr,
/usr/bin/mail ixr,
/usr/bin/mawk ixr,
/usr/bin/savelog ixr,
/usr/bin/wc ixr,
/usr/bin/xargs ixr,
/usr/sbin/postdrop ixr,
/usr/sbin/sendmail ixr,
/usr/sbin/update-aide.conf ixr,
/usr/share/ r,
/usr/share/doc/ r,
/var/ r,
/var/backups/ r,
/var/backups/* r,
/var/cache/ r,
/var/cache/apt/ r,
/var/cache/apt/archives/ r,
/var/cache/debconf/ r,
/var/cache/man/ r,
/var/cache/man/*/ r,
/var/lib/ r,
/var/lib/*/ r,
/var/lib/aide/aide.conf.autogenerated rw,
/var/lib/aide/aide.conf.autogenerated.tmp rw,
/var/lib/aide/aide.db r,
/var/lib/aide/aide.db.new krw,
/var/lib/amavis/.spamassassin/ r,
/var/lib/amavis/db/ r,
/var/lib/amavis/tmp/ r,
/var/lib/amavis/virusmails/ r,
/var/lib/apt/lists/ r,
/var/lib/apt/lists/partial/ r,
/var/lib/clamav/daily.inc/ r,
/var/lib/clamav/main.inc/ r,
/var/lib/dpkg/* r,
/var/lib/dpkg/*/ r,
/var/lock/ r,
/var/log/ r,
/var/log/* r,
/var/log/*/ r,
/var/log/aide/* lrw,
/var/log/apache2/* r,
/var/log/clamav/* r,
/var/run/ r,
/var/run/* lw,
/var/run/**/ r,
/var/run/aide/* lw,
/var/run/aide/cron.daily/ rw,
/var/run/aide/cron.daily/* rw,
/var/run/aide/cron.daily/dbcheckdb krw,
/var/spool/ r,
/var/spool/postfix/maildrop/* rw,
/var/spool/postfix/public/pickup w,
/var/tmp/ r,
/var/www/ r,
}