AppArmor profile exchange
#include <tunables/global>
/usr/sbin/proftpd {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/nis>
#include <abstractions/wutmp>
capability net_bind_service,
capability setgid,
capability setuid,
capability sys_chroot,
/etc/ftpusers r,
/etc/pam.d/* r,
/etc/proftpd/* r,
/etc/shadow r,
/etc/shells r,
/etc/ssl/openssl.cnf r,
/home/ r,
/home/** rw,
/home/*/ ram,
/lib/security/pam_*.so mr,
/proc/*/mounts r,
/proc/filesystems r,
/usr/lib/** mr,
/usr/sbin/proftpd mr,
/usr/share/drupal6/ r,
/var/log/proftpd/* w,
/var/run/proftpd.pid w,
/var/run/proftpd/proftpd.delay krw,
/var/run/proftpd/proftpd.scoreboard krw,
/var/run/proftpd/proftpd.sock w,
/var/run/proftpd/test.sock w,
/var/www/** rw,
}