logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

sbin.syslog-ng (2059B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2006-2009 Novell/SUSE
  4. #    Copyright (C) 2006 Christian Boltz
  5. #    Copyright (C) 2010 Canonical Ltd.
  6. #
  7. #    This program is free software; you can redistribute it and/or
  8. #    modify it under the terms of version 2 of the GNU General Public
  9. #    License published by the Free Software Foundation.
  10. #
  11. # ------------------------------------------------------------------
  13. abi <abi/3.0>,
  15. include <tunables/global>
  17. #define this to be where syslog-ng is chrooted
  18. @{CHROOT_BASE}=""
  20. profile syslog-ng /{usr/,}{bin,sbin}/syslog-ng {
  21.   include <abstractions/base>
  22.   include <abstractions/consoles>
  23.   include <abstractions/nameservice>
  24.   include <abstractions/mysql>
  25.   include <abstractions/openssl>
  26.   include <abstractions/python>
  27.   include <abstractions/hosts_access>
  29.   capability chown,
  30.   capability dac_override,
  31.   capability dac_read_search,
  32.   capability fsetid,
  33.   capability fowner,
  34.   capability sys_tty_config,
  35.   capability sys_resource,
  36.   capability syslog,
  38.   unix (receive) type=dgram,
  39.   unix (receive) type=stream,
  41.   /dev/log w,
  42.   /dev/syslog w,
  43.   /dev/tty10 rw,
  44.   /dev/xconsole rw,
  45.   /dev/kmsg r,
  46.   /etc/machine-id r,
  47.   /etc/syslog-ng/* r,
  48.   /etc/syslog-ng/conf.d/ r,
  49.   /etc/syslog-ng/conf.d/* r,
  50.   @{PROC}/kmsg r,
  51.   /{usr/,}{bin,sbin}/syslog-ng mr,
  52.   @{sys}/devices/system/cpu/online r,
  53.   /usr/share/syslog-ng/** r,
  54.   /var/lib/syslog-ng/syslog-ng-?????.qf rw,
  55.   # chrooted applications
  56.   @{CHROOT_BASE}/var/lib/*/dev/log w,
  57.   @{CHROOT_BASE}/var/lib/syslog-ng/syslog-ng.persist* rw,
  58.   @{CHROOT_BASE}/var/log/** w,
  59.   @{CHROOT_BASE}/@{run}/syslog-ng.pid krw,
  60.   @{CHROOT_BASE}/@{run}/syslog-ng.ctl rw,
  61.   /{var,var/run,run}/log/journal/ r,
  62.   /{var,var/run,run}/log/journal/*/ r,
  63.   /{var,var/run,run}/log/journal/*/*.journal r,
  64.   /{var,var/run,run}/log/journal/*.journal r,
  65.   @{run}/syslog-ng.ctl a,
  66.   @{run}/syslog-ng/additional-log-sockets.conf r,
  68.   # Site-specific additions and overrides. See local/README for details.
  69.   include if exists <local/sbin.syslog-ng>
  70. }