aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/abstractions/svn-repositories
blob: 8a1c7b6ffb118dd50e464e2a4e3ade6850623f16 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
# ------------------------------------------------------------------
#
#    Copyright (C) 2002-2006 Novell/SUSE
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

  abi <abi/4.0>,

  # This little snippet should abstract the read/write access to a repository.
  # it is intended to be included in profiles for svnserve/apache2 and maybe
  # some repository viewers like trac/viewvc

  # no hooks exec by default; please define whatever you need explicitly.

  /srv/svn/**/conf/* r,
  /srv/svn/**/format r,
  /srv/svn/**/db/fs-type r,
  /srv/svn/**/db/format r,

  # FSFS
  /srv/svn/**/db/ r,
  /srv/svn/**/db/uuid r,
  /srv/svn/**/db/write-lock rwl,
  /srv/svn/**/db/current rwl,
  /srv/svn/**/db/current*.tmp rwl,
  /srv/svn/**/db/revs/ r,
  /srv/svn/**/db/revs/* rw,
  /srv/svn/**/db/revprops/ r,
  /srv/svn/**/db/revprops/* rw,
  /srv/svn/**/db/transactions/** rw,

  # BDB
  /srv/svn/**/db/DB_CONFIG       r,
  /srv/svn/**/db/__db.[0-9]*     rwl,
  /srv/svn/**/db/log.[0-9]*      rwl,
  /srv/svn/**/db/nodes           rwl,
  /srv/svn/**/db/revisions       rwl,
  /srv/svn/**/db/transactions    rwl,
  /srv/svn/**/db/copies          rwl,
  /srv/svn/**/db/changes         rwl,
  /srv/svn/**/db/representations rwl,
  /srv/svn/**/db/strings         rwl,
  /srv/svn/**/db/uuids           rwl,
  /srv/svn/**/db/locks           rwl,
  /srv/svn/**/db/lock-tokens     rwl,

  # temp files
  /tmp/apr* rwl,
  /var/tmp/apr* rwl,
  /tmp/report*.tmp rwl,

  # Include additions to the abstraction
  include if exists <abstractions/svn-repositories.d>