AppArmor profile exchange

Find profiles by name | Find profiles by author | Find profiles by name and author | List all profiles | List all users | My profiles | New profile | Anonymous | Login
/etc/cron.daily/aide stive Tue Feb 17 10:31:22 +0100 2009 68 views
#include <tunables/global>
/etc/cron.daily/aide {
  #include <abstractions/base>
  #include <abstractions/bash>
  #include <abstractions/nameservice>

  capability chown,
  capability dac_override,
  capability fowner,
  capability fsetid,
  capability setgid,
  capability setuid,
  capability sys_ptrace,

  / r,
  /bin/bash ixr,
  /bin/cat ixr,
  /bin/chgrp ixr,
  /bin/chmod ixr,
  /bin/chown ixr,
  /bin/dash ixr,
  /bin/date ixr,
  /bin/dnsdomainname ixr,
  /bin/grep ixr,
  /bin/gzip ixr,
  /bin/hostname ixr,
  /bin/ln ixr,
  /bin/ls ixmr,
  /bin/mkdir ixr,
  /bin/mv ixr,
  /bin/rm ixr,
  /bin/sed ixr,
  /bin/touch ixr,
  /bin/which ixr,
  /dev/ r,
  /dev/**/ r,
  /dev/tty rw,
  /etc/ r,
  /etc/*/ r,
  /etc/aide/aide.conf r,
  /etc/aide/aide.conf.d/ r,
  /etc/aide/aide.conf.d/* r,
  /etc/aide/aide.conf.d/10_aide_hostname ixr,
  /etc/aide/aide.conf.d/30_aide_apache2 ixr,
  /etc/aide/aide.conf.d/30_inn2_vars ixr,
  /etc/aide/aide.conf.d/31_aide_amanda-server ixr,
  /etc/aide/aide.conf.d/31_aide_apt ixr,
  /etc/aide/aide.conf.d/31_aide_ifupdown ixr,
  /etc/aide/aide.conf.d/31_aide_torrus ixr,
  /etc/aide/aide.conf.d/70_aide_dev ixr,
  /etc/apt/sources.list r,
  /etc/cron.daily/aide mr,
  /etc/default/aide r,
  /etc/dpkg/dpkg.cfg r,
  /etc/mail.rc r,
  /etc/mailname r,
  /etc/postfix/* r,
  /lib/ r,
  /lib/modules/ r,
  /proc/ r,
  /proc/*/cmdline r,
  /proc/*/mounts r,
  /proc/*/stat r,
  /proc/filesystems r,
  /proc/meminfo r,
  /root/ r,
  /sbin/killall5 ixr,
  /tmp/ rw,
  /tmp/* rw,
  /tmp/.ICE-unix/ r,
  /tmp/.X11-unix/ r,
  /usr/ r,
  /usr/bin/aide ixr,
  /usr/bin/aide.wrapper ixr,
  /usr/bin/basename ixr,
  /usr/bin/cut ixr,
  /usr/bin/dirname ixr,
  /usr/bin/dotlockfile ixr,
  /usr/bin/dpkg ixr,
  /usr/bin/dpkg-query ixr,
  /usr/bin/expr ixr,
  /usr/bin/find ixr,
  /usr/bin/getopt ixr,
  /usr/bin/head ixr,
  /usr/bin/logger ixr,
  /usr/bin/mail ixr,
  /usr/bin/mawk ixr,
  /usr/bin/savelog ixr,
  /usr/bin/wc ixr,
  /usr/bin/xargs ixr,
  /usr/sbin/postdrop ixr,
  /usr/sbin/sendmail ixr,
  /usr/sbin/update-aide.conf ixr,
  /usr/share/ r,
  /usr/share/doc/ r,
  /var/ r,
  /var/backups/ r,
  /var/backups/* r,
  /var/cache/ r,
  /var/cache/apt/ r,
  /var/cache/apt/archives/ r,
  /var/cache/debconf/ r,
  /var/cache/man/ r,
  /var/cache/man/*/ r,
  /var/lib/ r,
  /var/lib/*/ r,
  /var/lib/aide/aide.conf.autogenerated rw,
  /var/lib/aide/aide.conf.autogenerated.tmp rw,
  /var/lib/aide/aide.db r,
  /var/lib/aide/aide.db.new krw,
  /var/lib/amavis/.spamassassin/ r,
  /var/lib/amavis/db/ r,
  /var/lib/amavis/tmp/ r,
  /var/lib/amavis/virusmails/ r,
  /var/lib/apt/lists/ r,
  /var/lib/apt/lists/partial/ r,
  /var/lib/clamav/daily.inc/ r,
  /var/lib/clamav/main.inc/ r,
  /var/lib/dpkg/* r,
  /var/lib/dpkg/*/ r,
  /var/lock/ r,
  /var/log/ r,
  /var/log/* r,
  /var/log/*/ r,
  /var/log/aide/* lrw,
  /var/log/apache2/* r,
  /var/log/clamav/* r,
  /var/run/ r,
  /var/run/* lw,
  /var/run/**/ r,
  /var/run/aide/* lw,
  /var/run/aide/cron.daily/ rw,
  /var/run/aide/cron.daily/* rw,
  /var/run/aide/cron.daily/dbcheckdb krw,
  /var/spool/ r,
  /var/spool/postfix/maildrop/* rw,
  /var/spool/postfix/public/pickup w,
  /var/tmp/ r,
  /var/www/ r,
}

Edit | Show | History