and then for subdirectories, and so on. Maybe I didn't find the right way, but I think it would be much more usable if tomoyo would support something like ** (in apparmour) which would match any character including the / (no matter how many subdirectories are there).