Merge lp:~fisiu/apparmor-profiles/hiawatha into lp:apparmor-profiles

Proposed by Mariusz Fik
Status: Merged
Merged at revision: 139
Proposed branch: lp:~fisiu/apparmor-profiles/hiawatha
Merge into: lp:apparmor-profiles
Diff against target: 39 lines (+35/-0)
1 file modified
usr.sbin.hiawatha (+35/-0)
To merge this branch: bzr merge lp:~fisiu/apparmor-profiles/hiawatha
Reviewer Review Type Date Requested Status
AppArmor Developers Pending
Review via email: mp+207291@code.launchpad.net

Description of the change

Add profile for hiawatha web server.

To post a comment you must log in.
lp:~fisiu/apparmor-profiles/hiawatha updated
126. By Mariusz Fik

Fix typo.

127. By Mariusz Fik

Fix for /var/lib/hiawatha directory and public_html in $HOME.

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1=== added file 'usr.sbin.hiawatha'
2--- usr.sbin.hiawatha 1970-01-01 00:00:00 +0000
3+++ usr.sbin.hiawatha 2014-02-28 19:37:29 +0000
4@@ -0,0 +1,35 @@
5+# Last Modified: Fri Feb 28 20:21:49 2014
6+#include <tunables/global>
7+
8+/usr/sbin/hiawatha {
9+ #include <abstractions/base>
10+
11+ capability chown,
12+ capability dac_override,
13+ capability fowner,
14+ capability fsetid,
15+ capability net_bind_service,
16+ capability setgid,
17+ capability setuid,
18+ capability sys_chroot,
19+
20+ network inet tcp,
21+
22+ /etc/default/nss r,
23+ /etc/group r,
24+ /etc/hiawatha/** r,
25+ /etc/nsswitch.conf r,
26+ /etc/passwd r,
27+ /home/*/public_html/ r,
28+ /home/*/public_html/** r,
29+ /srv/www/hiawatha/** r,
30+ /usr/sbin/cgi-wrapper mr,
31+ /usr/sbin/hiawatha mr,
32+ /var/lib/hiawatha/ rw,
33+ /var/lib/hiawatha/** rw,
34+ /var/log/hiawatha/* rw,
35+ /var/run/hiawatha.pid w,
36+ /var/run/nscd/passwd r,
37+ /{,var/}run/hiawatha.pid w,
38+
39+}

Subscribers

People subscribed via source and target branches

to status/vote changes: