mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 16:35:02 +01:00
4b34c77a39
abstractions/apache2-common. Additionally, add read permissions for /**/.htaccess and /dev/urandom to apache2-common. The patch is based on a profile abstraction from darix. I made some things more strict (compared to darix' profile), and OTOH added some things that are needed on my servers. *** BACKWARDS-INCOMPATIBLE CHANGES *** ^HANDLING_UNTRUSTED_INPUT - don't allow /.htaccess (.htaccess files in subdirectories are still allowed) - don't allow *.htaccess files (the old /**.htaccess rule was too generous)
20 lines
435 B
Text
20 lines
435 B
Text
# vim:syntax=apparmor
|
|
|
|
# This file contains basic permissions for Apache and every vHost
|
|
|
|
#include <abstractions/nameservice>
|
|
|
|
# Apache
|
|
network inet stream,
|
|
network inet6 stream,
|
|
# apache manual, error pages and icons
|
|
/usr/share/apache2/** r,
|
|
|
|
# changehat itself
|
|
/proc/*/attr/current w,
|
|
|
|
# htaccess files - for what ever it is worth
|
|
/**/.htaccess r,
|
|
|
|
/dev/urandom r,
|
|
|