mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-07 01:41:00 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d
History
Jamie Strandboge 0699034db4 The base abstraction already allows write access to 
/run/systemd/journal/dev-log but journald offers both:
- a native journal API at /run/systemd/journal/socket (see sd_journal_print(4))
- /run/systemd/journal/stdout for connecting a program's output to the journal
  (see systemd-cat(1)).

In addition to systemd-cat, the stdout access is required for nested container
(eg, LXD) logs to show up in the host. Interestingly, systemd-cat and LXD
containers require 'r' in addtion to 'w' to work. journald does not allow
reading log entries from this socket so the access is deemed safe.

Signed-off-by: Jamie Strandboge <jamie@canonical.com>
2017-04-27 08:28:46 -05:00
..
abstractions The base abstraction already allows write access to 2017-04-27 08:28:46 -05:00
apache2.d Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
local exported smbd files need to have 'k' to work properly with certain applications 2010-09-14 14:12:49 -05:00
tunables = Background = 2014-02-14 16:24:52 -06:00
bin.ping Make policy compatible with merged-/usr. 2016-12-03 10:59:01 +01:00
sbin.klogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
sbin.syslog-ng syslog-ng profile: allow writing *.qf files 2016-10-13 20:29:17 +02:00
sbin.syslogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
usr.lib.apache2.mpm-prefork.apache2 profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2 2016-03-19 03:10:00 -05:00
usr.lib.dovecot.anvil Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.auth Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.config Add missing permissions to dovecot profiles 2016-10-05 20:46:03 +02:00
usr.lib.dovecot.deliver profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-auth profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda update dovecot-lda profile 2017-04-07 00:12:53 +02:00
usr.lib.dovecot.imap Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.imap-login Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.lib.dovecot.lmtp Add missing permissions to dovecot profiles 2016-10-05 20:46:03 +02:00
usr.lib.dovecot.log Update dovecot profiles 2016-12-27 17:46:07 +01:00
usr.lib.dovecot.managesieve dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.pop3 profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.ssl-params Dovecot profile update 2017-01-26 21:41:38 +01:00
usr.sbin.apache2 Update phpsysinfo instructions in usr.sbin.apache2. Incorporate feedback from 2014-09-08 20:39:34 -05:00
usr.sbin.avahi-daemon profiles/apparmor.d/usr.sbin.avahi-daemon: allow write access to 2015-07-24 15:03:30 -05:00
usr.sbin.dnsmasq dnsmasq: allow libvirt_leaseshelper "m" permission on itself. 2016-11-06 10:48:34 +01:00
usr.sbin.dovecot Dovecot profile: change Px to mrPx for /usr/lib/dovecot/* 2017-01-30 20:43:47 +01:00
usr.sbin.identd identd pid file location on Debian/Ubuntu 2014-09-03 14:47:33 -05:00
usr.sbin.mdnsd mdnsd update for fine-grained netlink mediation 2014-09-03 14:49:50 -05:00
usr.sbin.nmbd Update nmbd profile and abstractions/samba 2016-12-13 22:16:00 +01:00
usr.sbin.nscd nscd profile: allow reading libvirt/dnsmasq/*.status 2016-12-09 17:49:54 +01:00
usr.sbin.ntpd Allow "network unspec dgram," in ntpd profile 2016-11-15 00:41:53 +01:00
usr.sbin.smbd usr.sbin.smbd: new lock dir used by recent versions (4.3.8) 2016-04-13 09:24:46 -04:00
usr.sbin.smbldap-useradd Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
usr.sbin.traceroute Allow both paths in traceroute profile 2016-09-30 00:07:26 +02:00
usr.sbin.winbindd winbindd profile: allow dac_override 2016-08-03 21:51:54 +02:00