From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../apparmor.d/abstractions/apache2-common | 43 ---------------------- 1 file changed, 43 deletions(-) delete mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/apache2-common (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/apache2-common') diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/apache2-common b/straper/db/public/apparmor/apparmor.d/abstractions/apache2-common deleted file mode 100644 index 0982635..0000000 --- a/straper/db/public/apparmor/apparmor.d/abstractions/apache2-common +++ /dev/null @@ -1,43 +0,0 @@ -# vim:syntax=apparmor - -# This file contains basic permissions for Apache and every vHost - - abi , - - include - - # Allow other processes to read our /proc entries - ptrace (readby), - # Allow other processes to trace us by default - ptrace (tracedby), - # Allow unconfined processes to send us signals by default - signal (receive) peer=unconfined, - # Allow apache to send us signals by default - signal (receive) peer=apache2, - # Allow other hats to signal by default - signal peer=apache2//*, - # Allow us to signal ourselves - signal peer=@{profile_name}, - - # Apache - network inet stream, - network inet6 stream, - # apache manual, error pages and icons - /usr/share/apache2/** r, - - # changehat itself - @{PROC}/@{pid}/attr/{apparmor/,}current rw, - - # htaccess files - for what ever it is worth - /**/.htaccess r, - - /dev/urandom r, - - # sasl-auth - @{run}/saslauthd/mux rw, - - # OCSP stapling - @{run}/lock/apache2/stapling-cache* rw, - - # Include additions to the abstraction - include if exists -- cgit v1.3