I have my "root" partition split into two: a normal one that contains most files and a second one used for those areas that can "grow". Concretely, this means, I have symlinks like:
/var/log -> /part1/log /var/cache -> /part1/cache /var/spool -> /part1/spool
This worked well until I started using AppArmor which keeps complaining about things like cupsd looking at files in /part1/log/cups/..
I currently work around this problem by adding entries for each application protected by AppArmor, but this is tedious.
Is there some way to tell AppArmor once and forall that if access to
/var/log/FOO is allowed than access to
/part1/log/FOO should also be allowed?