logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

ssl_keys (938B)

    

  1. # vim:syntax=apparmor
  2. # ------------------------------------------------------------------
  3. #
  4. #    Copyright (C) 2009 Canonical Ltd.
  5. #
  6. #    This program is free software; you can redistribute it and/or
  7. #    modify it under the terms of version 2 of the GNU General Public
  8. #    License published by the Free Software Foundation.
  9. #
  10. # ------------------------------------------------------------------
  12.   abi <abi/3.0>,
  14.   # private ssl permissions
  16.   # Just include the whole /etc/ssl directory if we should have access to
  17.   # private keys too
  18.   /etc/ssl/ r,
  19.   /etc/ssl/** r,
  21.   # acmetool
  22.   /var/lib/acme/live/* r,
  23.   /var/lib/acme/certs/** r,
  24.   /var/lib/acme/keys/** r,
  26.   # dehydrated
  27.   /{etc,var/lib}/dehydrated/certs/*/privkey*.pem r,
  29.   # certbot / letsencrypt
  30.   /etc/letsencrypt/archive/*/privkey*.pem r,
  32.   /etc/certbot/archive/*/privkey*.pem r,
  34.   # Include additions to the abstraction
  35.   include if exists <abstractions/ssl_keys.d>