Mariusz Fik has proposed merging lp:~fisiu/apparmor-profiles/hiawatha into
lp:apparmor-profiles.
Requested reviews:
AppArmor Developers (apparmor-dev)
For more details, see:
https://code.launchpad.net/~fisiu/apparmor-profiles/hiawatha/+merge/207291
Add profile for hiawatha web server.
--
https://code.launchpad.net/~fisiu/apparmor-profiles/hiawatha/+merge/207291
Your team AppArmor Developers is requested to review the proposed merge of
lp:~fisiu/apparmor-profiles/hiawatha into lp:apparmor-profiles.
=== added file 'usr.sbin.hiawatha'
--- usr.sbin.hiawatha 1970-01-01 00:00:00 +0000
+++ usr.sbin.hiawatha 2014-02-19 20:06:30 +0000
@@ -0,0 +1,33 @@
+# Last Modified: Wed Feb 19 11:39:47 2014
+#include <tunables/global>
+
+/usr/sbin/hiawatha {
+ #include <abstractions/base>
+
+ capability chown,
+ capability dac_override,
+ capability fowner,
+ capability fsetid,
+ capability net_bind_service,
+ capability setgid,
+ capability setuid,
+ capability sys_chroot,
+
+ network inet tcp,
+
+ /etc/default/nss r,
+ /etc/group r,
+ /etc/hiawatha/** r,
+ /etc/nsswitch.conf r,
+ /etc/passwd r,
+ /home/*/public_html/** r,
+ /srv/www/hiawatha/** r,
+ /usr/sbin/cgi-wrapper mr,
+ /usr/sbin/hiawatha mr,
+ /var/lib/hiawatha** rw,
+ /var/log/hiawatha/* rw,
+ /var/run/hiawatha.pid w,
+ /var/run/nscd/passwd r,
+ /{,var/}/run/hiawatha.pid w,
+
+}
--
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
