mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
Clean superfluous openssl abstraction includes
With abstractions/openssl now being included from abstraction/base (via the indirection of abstractions/crypto) anything already including abstraction/base can stop including abstractions/openssl directly.
This commit is contained in:
Christian Ehrhardt
parent
3d1dedfa7e
commit
aa69d9adc9
24 changed files with 0 additions and 25 deletions
|
|
@ -50,7 +50,6 @@
|
|||
include <abstractions/kde-icon-cache-write>
|
||||
include <abstractions/kde>
|
||||
include <abstractions/nameservice> # for IceProcessMessages () from libICE.so (called by libQtCore.so)
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/qt5>
|
||||
include <abstractions/recent-documents-write>
|
||||
include <abstractions/X>
|
||||
|
|
|
|||
|
|
@ -11,8 +11,6 @@ profile php-fpm /usr/sbin/php-fpm* flags=(attach_disconnected) {
|
|||
include <abstractions/nameservice>
|
||||
# common php files and support files that php needs
|
||||
include <abstractions/php>
|
||||
# read openssl configuration
|
||||
include <abstractions/openssl>
|
||||
# read the system certificates
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
|
|
|
|||
|
|
@ -6,7 +6,6 @@ profile samba-bgqd /usr/lib*/samba/{,samba/}samba-bgqd {
|
|||
include <abstractions/base>
|
||||
include <abstractions/cups-client>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/samba>
|
||||
|
||||
signal receive set=term peer=smbd,
|
||||
|
|
|
|||
|
|
@ -22,7 +22,6 @@ profile syslog-ng /{usr/,}{bin,sbin}/syslog-ng {
|
|||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/mysql>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/python>
|
||||
include <abstractions/hosts_access>
|
||||
|
||||
|
|
|
|||
|
|
@ -19,7 +19,6 @@ profile dovecot-auth /usr/lib*/dovecot/auth {
|
|||
include <abstractions/base>
|
||||
include <abstractions/mysql>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/wutmp>
|
||||
include <abstractions/dovecot-common>
|
||||
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ profile dovecot-dict /usr/lib*/dovecot/dict {
|
|||
include <abstractions/base>
|
||||
include <abstractions/mysql>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/dovecot-common>
|
||||
|
||||
capability setuid,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
profile dovecot-imap-login /usr/lib*/dovecot/imap-login {
|
||||
include <abstractions/base>
|
||||
include <abstractions/dovecot-common>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability setuid,
|
||||
capability sys_chroot,
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile dovecot-lmtp /usr/lib*/dovecot/lmtp {
|
|||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/dovecot-common>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/ssl_keys>
|
||||
|
||||
|
|
|
|||
|
|
@ -19,7 +19,6 @@ include <tunables/global>
|
|||
profile dovecot-managesieve-login /usr/lib*/dovecot/managesieve-login {
|
||||
include <abstractions/base>
|
||||
include <abstractions/dovecot-common>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability setuid,
|
||||
capability sys_chroot,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
profile dovecot-pop3-login /usr/lib*/dovecot/pop3-login {
|
||||
include <abstractions/base>
|
||||
include <abstractions/dovecot-common>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability setuid,
|
||||
capability sys_chroot,
|
||||
|
|
|
|||
|
|
@ -16,7 +16,6 @@ include <tunables/ntpd>
|
|||
profile ntpd /usr/{bin,sbin}/{,open}ntpd flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/xad>
|
||||
|
||||
|
|
|
|||
|
|
@ -8,7 +8,6 @@ profile smbd /usr/{bin,sbin}/smbd {
|
|||
include <abstractions/consoles>
|
||||
include <abstractions/cups-client>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/samba>
|
||||
include <abstractions/user-tmp>
|
||||
include <abstractions/wutmp>
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
profile postfix-proxymap /usr/lib/postfix/{bin/,sbin/,}proxymap {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/postfix-common>
|
||||
|
||||
/etc/my.cnf r,
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile postfix-smtp /usr/lib/postfix/{bin/,sbin/,}smtp {
|
|||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/postfix-common>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability dac_override,
|
||||
capability dac_read_search,
|
||||
|
|
|
|||
|
|
@ -18,7 +18,6 @@ profile postfix-smtpd /usr/lib/postfix/{bin/,sbin/,}smtpd {
|
|||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/postfix-common>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/ssl_certs>
|
||||
include <abstractions/ssl_keys>
|
||||
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
profile postfix-tlsmgr /usr/lib/postfix/{bin/,sbin/,}tlsmgr {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/postfix-common>
|
||||
|
||||
/usr/lib/postfix/{bin/,sbin/,}tlsmgr mrix,
|
||||
|
|
|
|||
|
|
@ -26,7 +26,6 @@ include <tunables/global>
|
|||
profile dhclient /{usr/,}sbin/dhclient {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/openssl>
|
||||
include <abstractions/nameservice>
|
||||
|
||||
capability net_raw,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability setgid,
|
||||
capability setuid,
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ include <tunables/global>
|
|||
profile clamd /usr/sbin/clamd {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability setgid,
|
||||
capability setuid,
|
||||
|
|
|
|||
|
|
@ -13,7 +13,6 @@ include <tunables/global>
|
|||
profile haproxy /usr/sbin/haproxy {
|
||||
include <abstractions/base>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/openssl>
|
||||
capability net_admin,
|
||||
capability net_bind_service,
|
||||
capability setgid,
|
||||
|
|
|
|||
|
|
@ -20,7 +20,6 @@ include <tunables/global>
|
|||
include <abstractions/kerberosclient>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/perl>
|
||||
include <abstractions/openssl>
|
||||
|
||||
capability kill,
|
||||
capability net_bind_service,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
include <abstractions/nameservice>
|
||||
include <abstractions/authentication>
|
||||
include <abstractions/user-mail>
|
||||
include <abstractions/openssl>
|
||||
|
||||
/dev/urandom r,
|
||||
/tmp/* rwl,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
include <abstractions/nameservice>
|
||||
include <abstractions/authentication>
|
||||
include <abstractions/user-mail>
|
||||
include <abstractions/openssl>
|
||||
|
||||
/dev/urandom r ,
|
||||
/tmp/.* rwl ,
|
||||
|
|
|
|||
|
|
@ -17,7 +17,6 @@ include <tunables/global>
|
|||
include <abstractions/nameservice>
|
||||
include <abstractions/authentication>
|
||||
include <abstractions/user-mail>
|
||||
include <abstractions/openssl>
|
||||
|
||||
/dev/urandom r ,
|
||||
/tmp/.* rwl ,
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue