# vim:syntax=apparmor

# This file contains basic permissions for every Apache Apparmor Hat

    #include <abstractions/base>
    #include <abstractions/apache2-common>
    #include <abstractions/fonts>
    #include <abstractions/mysql>
    #include <abstractions/nameservice>
    #include <abstractions/perl>
    #include <abstractions/php5>
    #include <abstractions/python>
    #include <abstractions/ssl_certs>
    #include <abstractions/user-tmp>

    # Allow receiving signals from unconfined processes
    signal (receive) peer=unconfined,
    # Allow to receive signals from ourselves
    signal (receive) peer=@{profile_name},
    signal (receive) peer=/usr/sbin/apache2,
    # Checking for PID existence is quite common so add it by default for now
    signal (receive, send) set=("exists"),

    /home/*/apparmor-writable/   rw,
    /home/*/apparmor-writable/** rwk,

		# THOR: to write errors
    /var/log/apache2/logs/localhost.log w,

    deny /home/**/temp-write-test-[0-9]* w,

