AppArmor profile exchange

Find profiles by name | Find profiles by author | Find profiles by name and author | List all profiles | List all users | My profiles | New profile | Anonymous | Login
/usr/sbin/apache2 stive Tue Feb 17 10:31:23 +0100 2009 50 views
#include <tunables/global>
/usr/sbin/apache2 {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/nis>
  #include <abstractions/perl>

  capability dac_override,
  capability dac_read_search,
  capability fowner,
  capability kill,
  capability net_bind_service,
  capability setgid,
  capability setuid,

  /etc/*/htpasswd.users r,
  /etc/apache2/** r,
  /etc/drupal/6/* r,
  /etc/drupal/6/sites/default/dbconfig.php r,
  /etc/drupal/6/sites/default/settings.php r,
  /etc/javascript-common/javascript-common.conf r,
  /etc/mime.types r,
  /etc/mtab r,
  /etc/nagios-pnp/* r,
  /etc/nagios2/* r,
  /etc/perl/Net/libnet.cfg r,
  /etc/php5/apache2/php.ini r,
  /etc/php5/conf.d/* r,
  /etc/roundcube/* r,
  /etc/shadow r,
  /etc/ssl/openssl.cnf r,
  /home/nonexistent/** krw,
  /home/www/** r,
  /proc/*/mounts r,
  /tmp/ r,
  /tmp/* w,
  /usr/bin/perl ix,
  /usr/bin/sperl5.8.8 ixr,
  /usr/lib/** mr,
  /usr/sbin/apache2 mr,
  /usr/share/apache2/icons/* r,
  /usr/share/drupal6/** r,
  /usr/share/file/magic.mime r,
  /usr/share/perl/** r,
  /usr/share/php/** r,
  /usr/share/roundcube/** r,
  /usr/share/zoneinfo/ r,
  /var/lib/drupal6/files/ w,
  /var/lib/roundcube/** r,
  /var/log/apache2/* w,
  /var/log/openwebmail.log a,
  /var/log/roundcube/errors a,
  /var/run/apache2.pid rw,
  /var/run/apache2/ssl_mutex w,
  /var/run/mysqld/mysqld.sock w,
  /var/tmp/* w,
  /var/www/** r,
  /var/www/*/cgi-bin/openwebmail/etc/sessions/** krw,
  /var/www/*/cgi-bin/openwebmail/etc/users/** klrw,
  /var/www/*/cgi-bin/openwebmail/openwebmail-abook.pl ixr,
  /var/www/*/cgi-bin/openwebmail/openwebmail-main.pl ixr,
  /var/www/*/cgi-bin/openwebmail/openwebmail-read.pl ixr,
  /var/www/*/cgi-bin/openwebmail/openwebmail-send.pl ixr,
  /var/www/*/cgi-bin/openwebmail/openwebmail-viewatt.pl ixr,
  /var/www/*/cgi-bin/openwebmail/openwebmail.pl ixr,
}

  /usr/sbin/apache2//DEFAULT_URI {
  }

  /usr/sbin/apache2//HANDLING_UNTRUSTED_INPUT {
  }

Edit | Show | History