logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

usr.sbin.nscd (1563B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2002-2005 Novell/SUSE
  4. #    Copyright (C) 2009-2010 Canonical Ltd.
  5. #
  6. #    This program is free software; you can redistribute it and/or
  7. #    modify it under the terms of version 2 of the GNU General Public
  8. #    License published by the Free Software Foundation.
  9. #
  10. # ------------------------------------------------------------------
  12. abi <abi/3.0>,
  14. include <tunables/global>
  15. profile nscd /usr/{bin,sbin}/nscd {
  16.   include <abstractions/base>
  17.   include <abstractions/consoles>
  18.   include <abstractions/nameservice>
  19.   include <abstractions/ssl_certs>
  21.   deny capability block_suspend,
  22.   capability net_bind_service,
  23.   capability setgid,
  24.   capability setuid,
  26.   /etc/machine-id r,
  27.   /etc/netgroup r,
  28.   /etc/nscd.conf r,
  29.   /usr/{bin,sbin}/nscd rmix,
  30.   @{run}/.nscd_socket wl,
  31.   @{run}/nscd/ rw,
  32.   @{run}/nscd/db* rwl,
  33.   @{run}/nscd/socket wl,
  34.   /{var/cache,var/db,var/lib,var/run,run}/nscd/{passwd,group,services,hosts,netgroup} rw,
  35.   @{run}/{nscd/,}nscd.pid rwl,
  36.   /var/lib/libvirt/dnsmasq/ r,
  37.   /var/lib/libvirt/dnsmasq/*.status r,
  38.   /var/log/nscd.log rw,
  39.   @{PROC}/@{pid}/cmdline r,
  40.   @{PROC}/@{pid}/fd/ r,
  41.   @{PROC}/@{pid}/fd/* r,
  42.   @{PROC}/@{pid}/mounts r,
  44.   # systemd-userdb
  45.   /{etc,run,run/host,/usr/lib}/userdb/ r,
  46.   /{etc,run,run/host,/usr/lib}/userdb/*.{user,user-privileged,group,group-privileged} r,
  48.   # needed by unscd
  49.   @{run}/systemd/notify w,
  51.   # Site-specific additions and overrides. See local/README for details.
  52.   include if exists <local/usr.sbin.nscd>
  53. }