mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-07 01:41:00 +01:00
1cc0885890
This patch adds the kernelvars tunable to the global set that is usually included by default in apparmor policies. It then converts the rules that are intended to match /proc/pid to use this tunable. Signed-off-by: Steve Beattie <sbeattie@ubuntu.com> Acked-By: Seth Arnold <seth.arnold@canonical.com>
20 lines
442 B
Text
20 lines
442 B
Text
# vim:syntax=apparmor
|
|
|
|
# This file contains basic permissions for Apache and every vHost
|
|
|
|
#include <abstractions/nameservice>
|
|
|
|
# Apache
|
|
network inet stream,
|
|
network inet6 stream,
|
|
# apache manual, error pages and icons
|
|
/usr/share/apache2/** r,
|
|
|
|
# changehat itself
|
|
@{PROC}/@{pid}/attr/current w,
|
|
|
|
# htaccess files - for what ever it is worth
|
|
/**/.htaccess r,
|
|
|
|
/dev/urandom r,
|
|
|