apparmor/profiles/apparmor.d
Christian Boltz 04240fe6de Dovecot profile update
Add several permissions to the dovecot profiles that are needed on ubuntu
(surprisingly not on openSUSE, maybe it depends on the dovecot config?)

As discussed some weeks ago, the added permissions use only /run/
instead of /{var/,}run/ (which is hopefully superfluous nowadays).


References: https://bugs.launchpad.net/apparmor/+bug/1512131


Acked-by: Seth Arnold <seth.arnold@canonical.com> for trunk, 2.10 and 2.9.
2017-01-26 21:41:38 +01:00
..
abstractions glibc uses /proc/*/auxv and /proc/*/status files, too 2017-01-20 17:01:50 -08:00
apache2.d Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
local exported smbd files need to have 'k' to work properly with certain applications 2010-09-14 14:12:49 -05:00
tunables = Background = 2014-02-14 16:24:52 -06:00
bin.ping Make policy compatible with merged-/usr. 2016-12-03 10:59:01 +01:00
sbin.klogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
sbin.syslog-ng syslog-ng profile: allow writing *.qf files 2016-10-13 20:29:17 +02:00
sbin.syslogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
usr.lib.apache2.mpm-prefork.apache2 profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2 2016-03-19 03:10:00 -05:00
usr.lib.dovecot.anvil Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.auth Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.config Add missing permissions to dovecot profiles 2016-10-05 20:46:03 +02:00
usr.lib.dovecot.deliver profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-auth profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda dovecot-lda profile: allow tempfiles and executing sendmail 2016-02-20 01:15:20 +01:00
usr.lib.dovecot.imap Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.imap-login Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.lmtp Add missing permissions to dovecot profiles 2016-10-05 20:46:03 +02:00
usr.lib.dovecot.log Update dovecot profiles 2016-12-27 17:46:07 +01:00
usr.lib.dovecot.managesieve dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.pop3 profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.ssl-params Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.sbin.apache2 Update phpsysinfo instructions in usr.sbin.apache2. Incorporate feedback from 2014-09-08 20:39:34 -05:00
usr.sbin.avahi-daemon profiles/apparmor.d/usr.sbin.avahi-daemon: allow write access to 2015-07-24 15:03:30 -05:00
usr.sbin.dnsmasq dnsmasq: allow libvirt_leaseshelper "m" permission on itself. 2016-11-06 10:48:34 +01:00
usr.sbin.dovecot dovecot profile: allow capability sys_resource 2016-11-29 21:35:14 +01:00
usr.sbin.identd identd pid file location on Debian/Ubuntu 2014-09-03 14:47:33 -05:00
usr.sbin.mdnsd mdnsd update for fine-grained netlink mediation 2014-09-03 14:49:50 -05:00
usr.sbin.nmbd Update nmbd profile and abstractions/samba 2016-12-13 22:16:00 +01:00
usr.sbin.nscd nscd profile: allow reading libvirt/dnsmasq/*.status 2016-12-09 17:49:54 +01:00
usr.sbin.ntpd Allow "network unspec dgram," in ntpd profile 2016-11-15 00:41:53 +01:00
usr.sbin.smbd usr.sbin.smbd: new lock dir used by recent versions (4.3.8) 2016-04-13 09:24:46 -04:00
usr.sbin.smbldap-useradd Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
usr.sbin.traceroute Allow both paths in traceroute profile 2016-09-30 00:07:26 +02:00
usr.sbin.winbindd winbindd profile: allow dac_override 2016-08-03 21:51:54 +02:00