logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

apache2-common (1119B)

    

  1. # vim:syntax=apparmor
  3. # This file contains basic permissions for Apache and every vHost
  5.   abi <abi/3.0>,
  7.   include <abstractions/nameservice>
  9.   # Allow other processes to read our /proc entries
  10.   ptrace (readby),
  11.   # Allow other processes to trace us by default
  12.   ptrace (tracedby),
  13.   # Allow unconfined processes to send us signals by default
  14.   signal (receive) peer=unconfined,
  15.   # Allow apache to send us signals by default
  16.   signal (receive) peer=apache2,
  17.   # Allow other hats to signal by default
  18.   signal peer=apache2//*,
  19.   # Allow us to signal ourselves
  20.   signal peer=@{profile_name},
  22.   # Apache
  23.   network inet stream,
  24.   network inet6 stream,
  25.   # apache manual, error pages and icons
  26.   /usr/share/apache2/** r,
  28.   # changehat itself
  29.   @{PROC}/@{pid}/attr/{apparmor/,}current                        rw,
  31.   # htaccess files - for what ever it is worth
  32.   /**/.htaccess            r,
  34.   /dev/urandom            r,
  36.   # sasl-auth
  37.   @{run}/saslauthd/mux rw,
  39.   # OCSP stapling
  40.   @{run}/lock/apache2/stapling-cache* rw,
  42.   # Include additions to the abstraction
  43.   include if exists <abstractions/apache2-common.d>