Steve Beattie c4a4e5bb82 profiles: add attach_disconnected flags to example apache profile ... Without it, seeing rejections like: apparmor="ALLOWED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/apache2" name="" pid=13777 comm="apache2" requested_mask="rw" denied_mask="rw" fsuid=0 ouid=0 Acked-by: Steve Beattie <steve@nxnw.org> Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875892		2017-10-27 10:59:33 -07:00
..
abstractions	profiles: allow OpenAL HRTF support in audio abstraction	2017-10-26 10:18:58 -07:00
apache2.d	Change /bin/ paths in profiles to also match on /usr/bin/	2015-10-20 23:12:35 +02:00
local	exported smbd files need to have 'k' to work properly with certain applications	2010-09-14 14:12:49 -05:00
tunables	Allow seven digit pid	2017-09-30 15:28:15 +03:00
bin.ping	Make policy compatible with merged-/usr.	2016-12-03 10:59:01 +01:00
sbin.klogd	klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE.	2015-03-07 21:16:11 +01:00
sbin.syslog-ng	syslog-ng profile: allow writing *.qf files	2016-10-13 20:29:17 +02:00
sbin.syslogd	klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE.	2015-03-07 21:16:11 +01:00
usr.lib.apache2.mpm-prefork.apache2	profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2	2016-03-19 03:10:00 -05:00
usr.lib.dovecot.anvil	Dovecot profile update	2017-01-26 21:41:38 +01:00
usr.lib.dovecot.auth	Dovecot profile update	2017-01-26 21:41:38 +01:00
usr.lib.dovecot.config	Add missing permissions to dovecot profiles	2016-10-05 20:46:03 +02:00
usr.lib.dovecot.deliver	profiles: add dovecot-common abstraction	2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict	profiles: add dovecot-common abstraction	2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-auth	profiles: add dovecot-common abstraction	2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda	update dovecot-lda profile	2017-04-07 00:12:53 +02:00
usr.lib.dovecot.imap	Dovecot profile update	2017-01-26 21:41:38 +01:00
usr.lib.dovecot.imap-login	Allow /var/run/dovecot/login-master-notify* in dovecot imap-login profiles	2017-09-28 17:47:20 +02:00
usr.lib.dovecot.lmtp	Add missing permissions to dovecot profiles	2016-10-05 20:46:03 +02:00
usr.lib.dovecot.log	Update dovecot profiles	2016-12-27 17:46:07 +01:00
usr.lib.dovecot.managesieve	dovecot profile update	2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login	dovecot profile update	2014-07-07 23:35:18 +02:00
usr.lib.dovecot.pop3	profiles: add dovecot-common abstraction	2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login	profiles: add dovecot-common abstraction	2014-06-27 12:14:53 -07:00
usr.lib.dovecot.ssl-params	Dovecot profile update	2017-01-26 21:41:38 +01:00
usr.sbin.apache2	apache2: use attach_disconnected	2017-09-20 16:45:09 +02:00
usr.sbin.avahi-daemon	profiles/apparmor.d/usr.sbin.avahi-daemon: allow write access to	2015-07-24 15:03:30 -05:00
usr.sbin.dnsmasq	dnsmasq: allow libvirt_leaseshelper "m" permission on itself.	2016-11-06 10:48:34 +01:00
usr.sbin.dovecot	dovecot profile: add the attach_disconnected flag	2017-06-29 22:53:40 +02:00
usr.sbin.identd	identd pid file location on Debian/Ubuntu	2014-09-03 14:47:33 -05:00
usr.sbin.mdnsd	mdnsd update for fine-grained netlink mediation	2014-09-03 14:49:50 -05:00
usr.sbin.nmbd	Update nmbd profile and abstractions/samba	2016-12-13 22:16:00 +01:00
usr.sbin.nscd	nscd profile: allow reading libvirt/dnsmasq/*.status	2016-12-09 17:49:54 +01:00
usr.sbin.ntpd	Allow "network unspec dgram," in ntpd profile	2016-11-15 00:41:53 +01:00
usr.sbin.smbd	usr.sbin.smbd: new lock dir used by recent versions (4.3.8)	2016-04-13 09:24:46 -04:00
usr.sbin.smbldap-useradd	Change /bin/ paths in profiles to also match on /usr/bin/	2015-10-20 23:12:35 +02:00
usr.sbin.traceroute	fix traceroute denies in tcp mode	2017-07-03 19:44:14 +03:00
usr.sbin.winbindd	Samba profile updates for ActiveDirectory / Kerberos	2017-08-29 13:31:20 +02:00