logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

ssl_certs (1522B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2002-2005 Novell/SUSE
  4. #    Copyright (C) 2010-2011 Canonical Ltd.
  5. #
  6. #    This program is free software; you can redistribute it and/or
  7. #    modify it under the terms of version 2 of the GNU General Public
  8. #    License published by the Free Software Foundation.
  9. #
  10. # ------------------------------------------------------------------
  12.   abi <abi/3.0>,
  14.   /etc/ca-certificates/{,**} r,
  15.   /etc/{,libre}ssl/ r,
  16.   /etc/{,libre}ssl/cert.pem r,
  17.   /etc/{,libre}ssl/certs/{,**} r,
  18.   /{etc,usr/share}/pki/bl[ao]cklist/{,*} r,
  19.   /{etc,usr/share}/pki/trust/{,*} r,
  20.   /{etc,usr/share}/pki/trust/{bl[oa]cklist,anchors}/{,**} r,
  21.   /usr/share/ca-certificates/{,**} r,
  22.   /usr/share/ssl/certs/ca-bundle.crt          r,
  23.   /usr/local/share/ca-certificates/{,**} r,
  24.   /var/lib/ca-certificates/{,**} r,
  26.   # acmetool
  27.   /var/lib/acme/certs/*/chain r,
  28.   /var/lib/acme/certs/*/cert r,
  30.   # dehydrated
  31.   /{etc,var/lib}/dehydrated/certs/*/cert*.pem r,
  32.   /{etc,var/lib}/dehydrated/certs/*/chain*.pem r,
  33.   /{etc,var/lib}/dehydrated/certs/*/fullchain*.pem r,
  34.   /{etc,var/lib}/dehydrated/certs/*/ocsp*.der r,
  36.   # certbot
  37.   /etc/letsencrypt/archive/*/cert*.pem r,
  38.   /etc/letsencrypt/archive/*/chain*.pem r,
  39.   /etc/letsencrypt/archive/*/fullchain*.pem r,
  41.   /etc/certbot/archive/*/cert*.pem r,
  42.   /etc/certbot/archive/*/chain*.pem r,
  43.   /etc/certbot/archive/*/fullchain*.pem r,
  45.   # Include additions to the abstraction
  46.   include if exists <abstractions/ssl_certs.d>