2021-03-11 13:29:52 +01:00
|
|
|
Index: mosquitto-2.0.8/security/mosquitto.apparmor
|
|
|
|
===================================================================
|
|
|
|
--- mosquitto-2.0.8.orig/security/mosquitto.apparmor
|
|
|
|
+++ mosquitto-2.0.8/security/mosquitto.apparmor
|
|
|
|
@@ -1,4 +1,6 @@
|
|
|
|
-/usr/sbin/mosquitto {
|
2017-05-30 14:53:47 +02:00
|
|
|
+#include <tunables/global>
|
|
|
|
+
|
2021-03-11 13:29:52 +01:00
|
|
|
+profile mosquitto /usr/sbin/mosquitto {
|
2017-05-30 14:53:47 +02:00
|
|
|
#include <abstractions/base>
|
|
|
|
#include <abstractions/nameservice>
|
2021-03-11 13:29:52 +01:00
|
|
|
|
2020-01-23 14:50:58 +01:00
|
|
|
@@ -6,6 +8,7 @@
|
|
|
|
/etc/mosquitto/mosquitto.conf r,
|
|
|
|
/etc/mosquitto/ca_certificates/* r,
|
|
|
|
/etc/mosquitto/certs/* r,
|
2020-07-29 22:59:10 +02:00
|
|
|
+ /etc/mosquitto/conf.d/ r,
|
2020-01-23 14:50:58 +01:00
|
|
|
/etc/mosquitto/conf.d/* r,
|
|
|
|
/var/lib/mosquitto/ r,
|
|
|
|
/var/lib/mosquitto/mosquitto.db rwk,
|
2021-03-11 13:29:52 +01:00
|
|
|
@@ -25,4 +28,5 @@
|
2017-05-30 14:53:47 +02:00
|
|
|
/lib{,32,64}/libwrap.so* rm,
|
|
|
|
/etc/hosts.allow r,
|
|
|
|
/etc/hosts.deny r,
|
|
|
|
+ #include <local/usr.sbin.mosquitto>
|
|
|
|
}
|