I am trying to use apparmor to put skype in complain mode, so complain messages can be generated and and apparmor profile for skype be built. The problem is that this generates no messages at all in /var/log/messages that could point to skype needing access to certain files. Also, when I put skype in enforce mode (after having done some learning in learning mode by making test calls etc.) it doesn't work anymore, which is no surprise, since it's apparmor profile only contains the application itself (see below)! From looking online one realises that skype needs to access a lot more files than these...Help is much appreciated and Skype is only an example, my apparmor doesn't really work with anything!
# Last Modified: Mon May 19 14:10:47 2008
#include <tunables/global>
/usr/bin/skype {
#include <abstractions/base>
/usr/bin/skype mr,
}
# Last Modified: Mon May 19 14:10:47 2008
#include <tunables/global>
/usr/bin/skype {
#include <abstractions/base>
/usr/bin/skype mr,
}