mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-05 17:01:00 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

usr.sbin.lighttpd: minor updates, added Debian/Ubuntu integration.

Browse source 
The integration changes are taken from the patch at
apparmor-2.12/debian/patches/debian/add-debian-integration-to-lighttpd.patch
and are necessary so that lighttpd doesn't serve everything as
application/octet-stream.
This commit is contained in:
Daniel Richard G 2018-07-30 22:48:17 -04:00
parent e43468c94a
commit 0de3d5e14b
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
profiles/apparmor/profiles/extras/usr.sbin.lighttpd
View file

@ -14,6 +14,7 @@
/usr/sbin/lighttpd {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/perl>
#include <abstractions/web-data>
# needed to change max file descriptors
@ -26,6 +27,8 @@
capability setgid,
capability setuid,
@{PROC}/loadavg r,
/etc/lighttpd r,
/etc/lighttpd/*.conf r,
/etc/lighttpd/conf.d/*.conf r,
@ -50,7 +53,17 @@
/var/log/lighttpd/*.log rw,
# include_shell
/{usr/,}bin/bash mix,
/{usr/,}bin/dash mix,
/{usr/,}bin/zsh mix,
/{usr/,}bin/cat mix,
# Debian/Ubuntu integration in default installation
/etc/mime.types r,
/usr/share/lighttpd/ r,
/usr/share/lighttpd/*.pl mrix,
/etc/lighttpd/conf-available/ r,
/etc/lighttpd/conf-available/*.conf r,
/etc/lighttpd/conf-enabled/ r,
/etc/lighttpd/conf-enabled/*.conf r,
}