AppArmor profile exchange

Find profiles by name | Find profiles by author | Find profiles by name and author | List all profiles | List all users | My profiles | New profile | Anonymous | Login
/sbin/syslog-ng stive Mon Jan 26 19:56:07 +0100 2009 49 views
# $Id$
# ------------------------------------------------------------------
#
#    Copyright (C) 2006 Novell/SUSE
#    Copyright (C) 2006 Christian Boltz
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------

#include <tunables/global>
/sbin/syslog-ng {
  #include <abstractions/base>
  #include <abstractions/consoles>
  #include <abstractions/nameservice>

  capability chown,
  capability dac_override,
  capability fowner,
  capability fsetid,
  capability sys_admin,

  /dev/log w,
  /dev/tty10 rw,
  /dev/xconsole rw,
  /etc/syslog-ng/* r,
  /sbin/syslog-ng mr,
  /var/lib/*/dev/log w,
  /var/log/** w,
  /var/run/syslog-ng.pid w,
  @{PROC}/kmsg r,
}

Edit | Show | History