~ubuntu-branches/ubuntu/wily/apparmor/wily

« back to all changes in this revision

Viewing changes to profiles/extras/usr.sbin.lighttpd

• browse files at revision 6
• compare with another revision
• download diff
• download tarball
• view history from revision 6

Show diffs side-by-side

added

removed

profiles/extras/usr.sbin.lighttpd

1

 

# $Id: usr.sbin.lighttpd 90 2006-08-04 19:13:59Z seth_arnold $

2

 

# ------------------------------------------------------------------

3

 

#

4

 

#    Copyright (C) 2002-2005 Novell/SUSE

5

 

#

6

 

#    This program is free software; you can redistribute it and/or

7

 

#    modify it under the terms of version 2 of the GNU General Public

8

 

#    License published by the Free Software Foundation.

9

 

#

10

 

# ------------------------------------------------------------------

11

 

# vim:syntax=apparmor

12

 

 

13

 

#include <tunables/global>

14

 

 

15

 

/usr/sbin/lighttpd {

16

 

  #include <abstractions/base>

17

 

  #include <abstractions/nameservice>

18

 

  #include <abstractions/web-data>

19

 

 

20

 

  # needed to change max file descriptors

21

 

  capability sys_resource,

22

 

 

23

 

  # network service ;)

24

 

  capability net_bind_service,

25

 

 

26

 

  # changing the uid/gid on startup

27

 

  capability setgid,

28

 

  capability setuid,

29

 

 

30

 

  /proc/sys/kernel/ngroups_max r,

31

 

 

32

 

  /etc/lighttpd r,

33

 

  /etc/lighttpd/*.conf r,

34

 

  /etc/lighttpd/conf.d/*.conf r,

35

 

  /etc/lighttpd/auth.d/* r,

36

 

  /etc/lighttpd/vhosts.d r,

37

 

  /etc/lighttpd/vhosts.d/* r,

38

 

  /usr/sbin/lighttpd mix,

39

 

 

40

 

  /usr/lib/lighttpd/*.so mr,

41

 

  /usr/lib64/lighttpd/*.so mr,

42

 

 

43

 

  /etc/ssl/private/*.pem r,

44

 

  # home dir. e.g. used for sockets.

45

 

  /var/lib/lighttpd/ r,

46

 

  /var/lib/lighttpd/** rwl,

47

 

  # mod_compress cache

48

 

  /var/cache/lighttpd/ r,

49

 

  /var/cache/lighttpd/** rwl,

50

 

  # pid

51

 

  /var/run/lighttpd.pid rwl,

52

 

  # log files

53

 

  /var/log/lighttpd/*.log rw,

54

 

  # include_shell

55

 

  /bin/bash mix,

56

 

  /bin/zsh mix,

57

 

  /bin/cat mix,

58

 

}

59

 

 

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1