mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
3810ecb08b
This patch finishes the conversion from /proc to the @{PROC}
tunable within profiles and abstractions. It also adjusts some of
the /proc/*/something usages to @{PROC}/[0-9]*/something to restrict
things to just the /proc/pid directories. (A followup patch will
convert these to use @{pid} from the kernelvars tunable.)
Signed-off-by: Steve Beattie <sbeattie@ubuntu.com>
Acked-By: Jamie Strandboge <jamie@canonical.com>
40 lines
1 KiB
Text
40 lines
1 KiB
Text
# Last Modified: Fri Sep 11 13:27:22 2009
|
|
# Author: Marc Deslauriers <marc.deslauriers@ubuntu.com>
|
|
|
|
^phpsysinfo {
|
|
#include <abstractions/apache2-common>
|
|
#include <abstractions/base>
|
|
#include <abstractions/nameservice>
|
|
#include <abstractions/python>
|
|
|
|
/bin/dash ixr,
|
|
/bin/df ixr,
|
|
/bin/mount ixr,
|
|
/bin/uname ixr,
|
|
/dev/bus/usb/ r,
|
|
/dev/bus/usb/** r,
|
|
/etc/debian_version r,
|
|
/etc/lsb-release r,
|
|
/etc/mtab r,
|
|
/etc/phpsysinfo/config.php r,
|
|
@{PROC}/** r,
|
|
/sys/bus/pci/devices/ r,
|
|
/sys/devices/** r,
|
|
/usr/bin/apt-cache ixr,
|
|
/usr/bin/dpkg-query ixr,
|
|
/usr/bin/lsb_release ixr,
|
|
/usr/bin/lspci ixr,
|
|
/usr/bin/who ixr,
|
|
/usr/sbin/lsusb ixr,
|
|
/usr/share/phpsysinfo/** r,
|
|
/var/lib/dpkg/available r,
|
|
/var/lib/dpkg/status r,
|
|
/var/lib/dpkg/triggers/* r,
|
|
/var/lib/dpkg/updates/ r,
|
|
/var/lib/misc/usb.ids r,
|
|
/var/log/apache2/access.log w,
|
|
/var/log/apache2/error.log w,
|
|
/{,var/}run/utmp rk,
|
|
/usr/share/misc/pci.ids r,
|
|
|
|
}
|