diff options
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/ssl_keys')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/abstractions/ssl_keys | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/ssl_keys b/straper/db/public/apparmor/apparmor.d/abstractions/ssl_keys new file mode 100644 index 0000000..21e4727 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/ssl_keys @@ -0,0 +1,35 @@ +# vim:syntax=apparmor +# ------------------------------------------------------------------ +# +# Copyright (C) 2009 Canonical Ltd. +# +# This program is free software; you can redistribute it and/or +# modify it under the terms of version 2 of the GNU General Public +# License published by the Free Software Foundation. +# +# ------------------------------------------------------------------ + + abi <abi/4.0>, + + # private ssl permissions + + # Just include the whole /etc/ssl directory if we should have access to + # private keys too + /etc/ssl/ r, + /etc/ssl/** r, + + # acmetool + /var/lib/acme/live/* r, + /var/lib/acme/certs/** r, + /var/lib/acme/keys/** r, + + # dehydrated + /{etc,var/lib}/dehydrated/certs/*/privkey*.pem r, + + # certbot / letsencrypt + /etc/letsencrypt/archive/*/privkey*.pem r, + + /etc/certbot/archive/*/privkey*.pem r, + + # Include additions to the abstraction + include if exists <abstractions/ssl_keys.d> |