logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

sbin.syslogd (1476B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2002-2009 Novell/SUSE
  4. #    Copyright (C) 2010 Canonical Ltd.
  5. #
  6. #    This program is free software; you can redistribute it and/or
  7. #    modify it under the terms of version 2 of the GNU General Public
  8. #    License published by the Free Software Foundation.
  9. #
  10. # ------------------------------------------------------------------
  12. abi <abi/3.0>,
  14. include <tunables/global>
  16. profile syslogd /{usr/,}{bin,sbin}/syslogd {
  17.   include <abstractions/base>
  18.   include <abstractions/nameservice>
  19.   include <abstractions/consoles>
  21.   capability sys_tty_config,
  22.   capability dac_override,
  23.   capability dac_read_search,
  24.   capability setuid,
  25.   capability setgid,
  26.   capability syslog,
  28.   unix (receive) type=dgram,
  29.   unix (receive) type=stream,
  31.   /dev/log                      wl,
  32.   /var/lib/*/dev/log            wl,
  33.   /dev/kmsg                     r,
  34.   /proc/kmsg                    r,
  36.   /dev/tty*                     w,
  37.   /dev/xconsole                 rw,
  38.   /etc/syslog.conf              r,
  39.   /etc/syslog.d/                r,
  40.   /etc/syslog.d/*               r,
  41.   /{usr/,}{bin,sbin}/syslogd    rmix,
  42.   /var/log/**                   rw,
  43.   @{run}/syslog.pid           krwl,
  44.   @{run}/syslogd.pid          krwl,
  45.   @{run}/utmp                 rw,
  46.   /var/spool/compaq/nic/messages_fifo rw,
  48.   # Site-specific additions and overrides. See local/README for details.
  49.   include if exists <local/sbin.syslogd>
  50. }