pool/haproxy
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- AppArmor: allow haprox to read the files needed for the "p

Browse Source 
post_mortem" support

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=303
This commit is contained in:
Marcus Rückert 2024-05-31 12:09:35 +00:00 committed by Git OBS Bridge
parent e8295803a1
commit 02fdc0cf27
2 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
haproxy.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Fri May 31 12:07:48 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- AppArmor: allow haprox to read the files needed for the "p
post_mortem" support
-------------------------------------------------------------------
Wed May 29 14:00:25 UTC 2024 - mrueckert@suse.de

13
usr.sbin.haproxy.apparmor
View File

@ -38,7 +38,20 @@ profile haproxy /usr/sbin/haproxy {
/{,var/}run/haproxy/pid rw,
/{,var/}run/haproxy/master.sock* rwlk,
# This is for the additional debug output in haproxy >= 2.9
# can be accessed with "p post_mortem" in gdb
/sys/devices/system/node/ r,
/sys/devices/system/node/*/cpumap r,
/sys/devices/system/cpu/online r,
/sys/class/dmi/id/sys_vendor r,
/sys/class/dmi/id/product_family r,
/sys/class/dmi/id/product_name r,
/sys/class/dmi/id/board_vendor r,
/sys/firmware/devicetree/base/model r,
/sys/class/dmi/id/board_name r,
/proc/2/status r,
/proc/cpuinfo r,
# end of debug.c files
# Site-specific additions and overrides. See local/README for details.
#include if exists <local/haproxy>