~ubuntu-branches/ubuntu/wily/apparmor/wily

« back to all changes in this revision

Viewing changes to .pc/0003-add-debian-integration-to-lighttpd.patch/profiles/apparmor/profiles/extras/usr.sbin.lighttpd

• browse files at revision 6
• compare with another revision
• download diff
• download tarball
• view history from revision 6

Show diffs side-by-side

added

removed

.pc/0003-add-debian-integration-to-lighttpd.patch/profiles/apparmor/profiles/extras/usr.sbin.lighttpd

 

1

# ------------------------------------------------------------------

 

2

#

 

3

#    Copyright (C) 2002-2005 Novell/SUSE

 

4

#

 

5

#    This program is free software; you can redistribute it and/or

 

6

#    modify it under the terms of version 2 of the GNU General Public

 

7

#    License published by the Free Software Foundation.

 

8

#

 

9

# ------------------------------------------------------------------

 

10

# vim:syntax=apparmor

 

11

 

 

12

#include <tunables/global>

 

13

 

 

14

/usr/sbin/lighttpd {

 

15

  #include <abstractions/base>

 

16

  #include <abstractions/nameservice>

 

17

  #include <abstractions/web-data>

 

18

 

 

19

  # needed to change max file descriptors

 

20

  capability sys_resource,

 

21

 

 

22

  # network service ;)

 

23

  capability net_bind_service,

 

24

 

 

25

  # changing the uid/gid on startup

 

26

  capability setgid,

 

27

  capability setuid,

 

28

 

 

29

  /etc/lighttpd r,

 

30

  /etc/lighttpd/*.conf r,

 

31

  /etc/lighttpd/conf.d/*.conf r,

 

32

  /etc/lighttpd/auth.d/* r,

 

33

  /etc/lighttpd/vhosts.d r,

 

34

  /etc/lighttpd/vhosts.d/* r,

 

35

  /usr/sbin/lighttpd mix,

 

36

 

 

37

  /usr/lib/lighttpd/*.so mr,

 

38

  /usr/lib64/lighttpd/*.so mr,

 

39

 

 

40

  /etc/ssl/private/*.pem r,

 

41

  # home dir. e.g. used for sockets.

 

42

  /var/lib/lighttpd/ r,

 

43

  /var/lib/lighttpd/** rwl,

 

44

  # mod_compress cache

 

45

  /var/cache/lighttpd/ r,

 

46

  /var/cache/lighttpd/** rwl,

 

47

  # pid

 

48

  /var/run/lighttpd.pid rwl,

 

49

  # log files

 

50

  /var/log/lighttpd/*.log rw,

 

51

  # include_shell

 

52

  /bin/bash mix,

 

53

  /bin/zsh mix,

 

54

  /bin/cat mix,

 

55

}

 

56

 

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1