mosquitto/mosquitto-1.4.1_apparmor.patch

27 lines
773 B
Diff
Raw Permalink Normal View History

Index: mosquitto-2.0.8/security/mosquitto.apparmor
===================================================================
--- mosquitto-2.0.8.orig/security/mosquitto.apparmor
+++ mosquitto-2.0.8/security/mosquitto.apparmor
@@ -1,4 +1,6 @@
-/usr/sbin/mosquitto {
+#include <tunables/global>
+
+profile mosquitto /usr/sbin/mosquitto {
#include <abstractions/base>
#include <abstractions/nameservice>
@@ -6,6 +8,7 @@
/etc/mosquitto/mosquitto.conf r,
/etc/mosquitto/ca_certificates/* r,
/etc/mosquitto/certs/* r,
+ /etc/mosquitto/conf.d/ r,
/etc/mosquitto/conf.d/* r,
/var/lib/mosquitto/ r,
/var/lib/mosquitto/mosquitto.db rwk,
@@ -25,4 +28,5 @@
/lib{,32,64}/libwrap.so* rm,
/etc/hosts.allow r,
/etc/hosts.deny r,
+ #include <local/usr.sbin.mosquitto>
}