- AppArmor: allow haprox to read the files needed for the "p
post_mortem" support OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=303
This commit is contained in:
parent
e8295803a1
commit
02fdc0cf27
@ -1,3 +1,9 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri May 31 12:07:48 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
|
||||||
|
|
||||||
|
- AppArmor: allow haprox to read the files needed for the "p
|
||||||
|
post_mortem" support
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Wed May 29 14:00:25 UTC 2024 - mrueckert@suse.de
|
Wed May 29 14:00:25 UTC 2024 - mrueckert@suse.de
|
||||||
|
|
||||||
|
@ -38,7 +38,20 @@ profile haproxy /usr/sbin/haproxy {
|
|||||||
/{,var/}run/haproxy/pid rw,
|
/{,var/}run/haproxy/pid rw,
|
||||||
/{,var/}run/haproxy/master.sock* rwlk,
|
/{,var/}run/haproxy/master.sock* rwlk,
|
||||||
|
|
||||||
|
# This is for the additional debug output in haproxy >= 2.9
|
||||||
|
# can be accessed with "p post_mortem" in gdb
|
||||||
/sys/devices/system/node/ r,
|
/sys/devices/system/node/ r,
|
||||||
|
/sys/devices/system/node/*/cpumap r,
|
||||||
|
/sys/devices/system/cpu/online r,
|
||||||
|
/sys/class/dmi/id/sys_vendor r,
|
||||||
|
/sys/class/dmi/id/product_family r,
|
||||||
|
/sys/class/dmi/id/product_name r,
|
||||||
|
/sys/class/dmi/id/board_vendor r,
|
||||||
|
/sys/firmware/devicetree/base/model r,
|
||||||
|
/sys/class/dmi/id/board_name r,
|
||||||
|
/proc/2/status r,
|
||||||
|
/proc/cpuinfo r,
|
||||||
|
# end of debug.c files
|
||||||
|
|
||||||
# Site-specific additions and overrides. See local/README for details.
|
# Site-specific additions and overrides. See local/README for details.
|
||||||
#include if exists <local/haproxy>
|
#include if exists <local/haproxy>
|
||||||
|
Loading…
Reference in New Issue
Block a user