coturn/coturn-apparmor-usr.bin.turnserver
Johannes Weberhofer a23b99d3d2 Accepting request 858909 from home:stroeder:branches:network:telephony
- AppArmor profile has ABI 3.0 and some minor changes
- Modified systemd unit:
  * do not use daemon mode
  * Type=simple
  * added security settings
- added multi-instance systemd unit

OBS-URL: https://build.opensuse.org/request/show/858909
OBS-URL: https://build.opensuse.org/package/show/network:telephony/coturn?expand=0&rev=15
2020-12-29 16:21:36 +00:00

24 lines
588 B
Plaintext

abi <abi/3.0>,
#include <tunables/global>
profile coturn /usr/{bin,sbin}/turnserver flags=(attach_disconnected) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
/etc/coturn/*.conf r,
/etc/pki/coturn/** r,
/usr/bin/turnserver mr,
owner /run/coturn/* w,
owner /var/lib/coturn r,
owner /var/lib/coturn/* rwk,
owner /var/log/coturn/*.log rw,
owner /var/log/turn*.log w,
deny /etc/ssl/openssl.cnf r,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.bin.turnserver>
}