← Back to branch summary

~ubuntu-branches/ubuntu/wily/apparmor/wily

« back to all changes in this revision

Viewing changes to profiles/apparmor.d/sbin.syslog-ng

  • Committer: Bazaar Package Importer
  • Author(s): Kees Cook
  • Date: 2011-08-10 18:12:34 UTC
  • mto: This revision was merged to the branch mainline in revision 9.
  • Revision ID: james.westby@ubuntu.com-20110810181234-b6obckg60cp99crg
Tags: upstream-2.7.0~beta1+bzr1774
Import upstream version 2.7.0~beta1+bzr1774

Show diffs side-by-side

added added

removed removed

Lines of Context:
profiles/apparmor.d/sbin.syslog-ng
19
19
  #include <abstractions/base>
20
20
  #include <abstractions/consoles>
21
21
  #include <abstractions/nameservice>
 
22
  #include <abstractions/mysql>
22
23
 
23
24
  capability chown,
24
25
  capability dac_override,
25
26
  capability fsetid,
26
27
  capability fowner,
27
28
  capability sys_tty_config,
 
29
  capability sys_resource,
28
30
 
29
31
  /dev/log w,
30
32
  /dev/syslog w,
35
37
  /etc/hosts.deny r,
36
38
  /etc/hosts.allow r,
37
39
  /sbin/syslog-ng mr,
 
40
  /usr/share/syslog-ng/** r,
38
41
  # chrooted applications
39
42
  @{CHROOT_BASE}/var/lib/*/dev/log w,
40
 
  @{CHROOT_BASE}/var/lib/syslog-ng/syslog-ng.persist rw,
 
43
  @{CHROOT_BASE}/var/lib/syslog-ng/syslog-ng.persist* rw,
41
44
  @{CHROOT_BASE}/var/log/** w,
42
 
  @{CHROOT_BASE}/var/run/syslog-ng.pid krw,
 
45
  @{CHROOT_BASE}/{,var/}run/syslog-ng.pid krw,
 
46
  @{CHROOT_BASE}/{,var/}run/syslog-ng.ctl rw,
 
47
  /{var,/}run/syslog-ng/additional-log-sockets.conf r,
43
48
 
44
49
  # Site-specific additions and overrides. See local/README for details.
45
50
  #include <local/sbin.syslog-ng>