apparmor/profiles/apparmor.d
Simon Deziel d0aa863f6b dovecot: allow chroot'ing the auth processes
When using passdb/userdb not requiring root (!= /etc/shadow access)
it is recommended to run the auth processes as non root and chroot'ed

Signed-off-by: Simon Deziel <simon@sdeziel.info>
2019-02-13 22:27:08 -05:00
..
abstractions vulkan: allow reading /etc/vulkan/icd.d/ 2019-02-10 14:07:17 +02:00
apache2.d Use @{sys} tunable in profiles and abstractions 2018-11-08 20:04:46 +02:00
local exported smbd files need to have 'k' to work properly with certain applications 2010-09-14 14:12:49 -05:00
tunables Make tunables/share play well with aliases. 2019-01-07 12:58:56 +00:00
bin.ping profiles: support void-specific binary names for openntpd, traceroute, and ping 2018-09-11 09:54:33 -07:00
lsb_release lsb_release: added permissions needed by openSUSE implementation. 2018-08-01 19:13:26 -04:00
nvidia_modprobe Use @{sys} tunable in profiles and abstractions 2018-11-08 20:04:46 +02:00
sbin.klogd profiles: support distributions which merge sbin into bin 2018-07-25 14:07:35 -07:00
sbin.syslog-ng Use @{sys} tunable in profiles and abstractions 2018-11-08 20:04:46 +02:00
sbin.syslogd profiles: support distributions which merge sbin into bin 2018-07-25 14:07:35 -07:00
usr.lib.apache2.mpm-prefork.apache2 profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2 2016-03-19 03:10:00 -05:00
usr.lib.dovecot.anvil dovecot: allow FD passing between dovecot and dovecot's anvil 2019-02-10 21:36:10 -05:00
usr.lib.dovecot.auth dovecot: allow chroot'ing the auth processes 2019-02-13 22:27:08 -05:00
usr.lib.dovecot.config dovecot/config: allow dac_read_search and reading ssl-parameters.dat 2018-04-14 22:53:40 +02:00
usr.lib.dovecot.deliver profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict Update /usr/lib/dovecot/* profiles 2017-12-18 17:00:35 +01:00
usr.lib.dovecot.dovecot-auth profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.lib.dovecot.imap Update /usr/lib/dovecot/* profiles 2017-12-18 17:00:35 +01:00
usr.lib.dovecot.imap-login Allow /var/run/dovecot/login-master-notify* in dovecot imap-login profiles 2017-09-28 17:47:20 +02:00
usr.lib.dovecot.lmtp dovecot/lmtp: allow dac_read_search 2018-01-18 18:15:43 +01:00
usr.lib.dovecot.log Update dovecot profiles 2016-12-27 17:46:07 +01:00
usr.lib.dovecot.managesieve dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login Update /usr/lib/dovecot/* profiles 2017-12-18 17:00:35 +01:00
usr.lib.dovecot.pop3 profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login Update /usr/lib/dovecot/* profiles 2017-12-18 17:00:35 +01:00
usr.lib.dovecot.ssl-params add new location for ssl-params file 2018-10-09 23:24:51 +02:00
usr.lib.dovecot.stats add dovecot/stats profile, and allow dovecot to run it 2018-04-13 13:55:05 +00:00
usr.sbin.apache2 Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.avahi-daemon Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.dnsmasq dnsmasq: allow peer=libvirtd to support named profile 2019-01-13 17:38:09 +01:00
usr.sbin.dovecot dovecot: allow FD passing between dovecot and dovecot's anvil 2019-02-10 21:36:10 -05:00
usr.sbin.identd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.mdnsd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.nmbd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.nscd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.ntpd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.smbd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.smbldap-useradd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00
usr.sbin.traceroute profiles: support void-specific binary names for openntpd, traceroute, and ping 2018-09-11 09:54:33 -07:00
usr.sbin.winbindd Add profile names to all profiles with {bin,sbin} attachment 2018-10-15 20:57:33 +02:00