所以我有:
#include <tunables/global> /usr/bin/python2.7 { /** mixrw,deny /** lwk,} /usr/lib/jvm/java-6-openjdk/jre/bin/java { /** mixrw,} /var/www/service/usercode/*/a.out { /** mixrw,#deny /** lwk,}
我怎么能这样做:
#include <tunables/global> /usr/bin/python2.7 /usr/lib/jvm/java-6-openjdk/jre/bin/java /var/www/service/usercode/*/a.out { /** mixrw,}
#include <tunables/global> /usr/bin/python2.7 { #include <abstractions/mystuff1> } /usr/lib/jvm/java-6-openjdk/jre/bin/java { #include <abstractions/mystuff1> } /var/www/service/usercode/*/a.out { #include <abstractions/mystuff1> }
(然后把常见的东西放在抽象/ mystuff1中,当然)