所以我有:
#include <tunables/global> /usr/bin/python2.7 { /** mixrw, deny /** lwk, } /usr/lib/jvm/java-6-openjdk/jre/bin/java { /** mixrw, deny /** lwk, } /var/www/service/usercode/*/a.out { /** mixrw, #deny /** lwk, }
我怎么能这样做:
#include <tunables/global> /usr/bin/python2.7 /usr/lib/jvm/java-6-openjdk/jre/bin/java /var/www/service/usercode/*/a.out { /** mixrw, deny /** lwk, }
#include <tunables/global> /usr/bin/python2.7 { #include <abstractions/mystuff1> } /usr/lib/jvm/java-6-openjdk/jre/bin/java { #include <abstractions/mystuff1> } /var/www/service/usercode/*/a.out { #include <abstractions/mystuff1> }
(然后把普通的东西放在abstractions/mystuff1当然)