This patch supports canonical config paths by the help of the `personal-files` and the `system-files` security confinement interfaces. Signed-off-by: 林博仁(Buo-ren Lin) <Buo.Ren.Lin@gmail.com>