Accepting request 1177941 from server:http

- AppArmor: allow haproxy to read the files needed for the
  "p post_mortem" support

OBS-URL: https://build.opensuse.org/request/show/1177941
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/haproxy?expand=0&rev=143
This commit is contained in:
Ana Guerrero 2024-06-03 15:41:34 +00:00 committed by Git OBS Bridge
commit 7198745188
2 changed files with 19 additions and 0 deletions

View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Fri May 31 12:07:48 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
- AppArmor: allow haproxy to read the files needed for the
"p post_mortem" support
-------------------------------------------------------------------
Wed May 29 14:00:25 UTC 2024 - mrueckert@suse.de

View File

@ -38,7 +38,20 @@ profile haproxy /usr/sbin/haproxy {
/{,var/}run/haproxy/pid rw,
/{,var/}run/haproxy/master.sock* rwlk,
# This is for the additional debug output in haproxy >= 2.9
# can be accessed with "p post_mortem" in gdb
/sys/devices/system/node/ r,
/sys/devices/system/node/*/cpumap r,
/sys/devices/system/cpu/online r,
/sys/class/dmi/id/sys_vendor r,
/sys/class/dmi/id/product_family r,
/sys/class/dmi/id/product_name r,
/sys/class/dmi/id/board_vendor r,
/sys/firmware/devicetree/base/model r,
/sys/class/dmi/id/board_name r,
/proc/2/status r,
/proc/cpuinfo r,
# end of debug.c files
# Site-specific additions and overrides. See local/README for details.
#include if exists <local/haproxy>