# CloudPanel override for the AppArmor profile shipped by Ubuntu's `apparmor`
# package (/etc/apparmor.d/proftpd), pulled in via its trailing
# `include if exists <local/proftpd>`.
#
# The upstream profile gates site data behind `owner @{HOME}/** rw,`, which
# requires fsuid == ouid. CloudPanel serves each site as a dedicated FTP user
# whose uid differs from the site user that owns the files, so that rule never
# matches and every read below the home directory is denied. Re-grant the same
# access without the `owner` qualifier; DAC and ACLs still apply.
#
# Needed on Ubuntu 26.04+; inert on releases that ship no proftpd profile.

/home/*/ r,
/home/*/** rwkl,