diff options
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/crypto')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/abstractions/crypto | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/crypto b/straper/db/public/apparmor/apparmor.d/abstractions/crypto new file mode 100644 index 0000000..9d46608 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/crypto @@ -0,0 +1,34 @@ +# vim:syntax=apparmor +# ------------------------------------------------------------------ +# +# Copyright (C) 2002-2009 Novell/SUSE +# Copyright (C) 2009-2011 Canonical Ltd. +# Copyright (C) 2021 Christian Boltz +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of version 2 of the GNU General Public +# License published by the Free Software Foundation. +# +# ------------------------------------------------------------------ + + abi <abi/4.0>, + + # Global config of openssl + include <abstractions/openssl> + + @{etc_ro}/gcrypt/hwf.deny r, + @{etc_ro}/gcrypt/random.conf r, + @{PROC}/sys/crypto/fips_enabled r, + + # libgcrypt reads some flags from /proc + @{PROC}/sys/crypto/* r, + + # crypto policies used by various libraries + /etc/crypto-policies/*/*.txt r, + /usr/share/crypto-policies/*/*.txt r, + + # Global gnutls config + @{etc_ro}/gnutls/config r, + @{etc_ro}/gnutls/pkcs11.conf r, + + include if exists <abstractions/crypto.d> |