Globbing (or regular expression matching) is when you modify the directory path using
wild cards to include a group of files or subdirectories. File resources can be specified
with a globbing syntax similar to that used by popular shells, such as csh, Bash, and
zsh.
Substitutes for any number of any characters, except
/
.
*
Example: An arbitrary number of file path elements.
Substitutes for any number of characters, including
/
.
**
Example: An arbitrary number of path elements, including entire
directories.
Substitutes for any single character, except
/
.
?
Substitutes for the single character
a
,
b
, or
c
.
[abc]
Example: a rule that matches
/home[01]/*/.plan
allows a
program to access
.plan
files for users in both
/home0
and
/home1
.
Substitutes for the single character
a
,
b
, or
c
.
[a-c]
Expands to one rule to match
ab
and one rule to match
cd
.
{ab,cd}
Example: a rule that matches
/{usr,www}/pages/**
grants
access to Web pages in both
/usr/pages
and
/www/pages
.
Substitutes for any character except
a
.
[ ^a ]
16
Novell AppArmor Administration Guide
