# vim:syntax=apparmor

# This file contains basic permissions for Apache and every vHost

  #include <abstractions/nameservice>
  /etc/hosts.allow r,
  /etc/hosts.deny r,

  # Apache
  network inet stream,
  network inet6 stream,
  # apache manual, error pages and icons
  /usr/share/apache2/** r,

  # changehat itself
  @{PROC}/@{pid}/attr/current                        rw,

	# basic log files
  /var/log/apache2/access.log w,
  /var/log/apache2/error.log w,

  # htaccess files - for what ever it is worth
  /**/.htaccess            r,

  /dev/urandom            r,

	# THOR: mod_evasive
  /var/log/evasive/* rw,

	# THOR: clamav.php
  /run/clamav/clamd.ctl rw,

