aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/abstractions/apache2-common
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
commit83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch)
tree19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/abstractions/apache2-common
parent51d43498b07dc97d795947964534f0903cd05db5 (diff)
downloadbin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz
bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/apache2-common')
-rw-r--r--straper/db/public/apparmor/apparmor.d/abstractions/apache2-common43
1 files changed, 0 insertions, 43 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/apache2-common b/straper/db/public/apparmor/apparmor.d/abstractions/apache2-common
deleted file mode 100644
index 0982635..0000000
--- a/straper/db/public/apparmor/apparmor.d/abstractions/apache2-common
+++ /dev/null
@@ -1,43 +0,0 @@
-# vim:syntax=apparmor
-
-# This file contains basic permissions for Apache and every vHost
-
- abi <abi/4.0>,
-
- include <abstractions/nameservice>
-
- # Allow other processes to read our /proc entries
- ptrace (readby),
- # Allow other processes to trace us by default
- ptrace (tracedby),
- # Allow unconfined processes to send us signals by default
- signal (receive) peer=unconfined,
- # Allow apache to send us signals by default
- signal (receive) peer=apache2,
- # Allow other hats to signal by default
- signal peer=apache2//*,
- # Allow us to signal ourselves
- signal peer=@{profile_name},
-
- # Apache
- network inet stream,
- network inet6 stream,
- # apache manual, error pages and icons
- /usr/share/apache2/** r,
-
- # changehat itself
- @{PROC}/@{pid}/attr/{apparmor/,}current rw,
-
- # htaccess files - for what ever it is worth
- /**/.htaccess r,
-
- /dev/urandom r,
-
- # sasl-auth
- @{run}/saslauthd/mux rw,
-
- # OCSP stapling
- @{run}/lock/apache2/stapling-cache* rw,
-
- # Include additions to the abstraction
- include if exists <abstractions/apache2-common.d>