2020-10-05 11:06:34 +00:00
|
|
|
# Last Modified: Mon Oct 5 10:19:40 2020
|
|
|
|
|
#include <tunables/global>
|
|
|
|
|
|
|
|
|
|
# based on https://github.com/progmaticltd/homebox/blob/master/install/playbooks/roles/rspamd/templates/apparmor.d/usr.bin.rspamd
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/usr/bin/rspamd {
|
|
|
|
|
#include <abstractions/base>
|
|
|
|
|
#include <abstractions/nameservice>
|
|
|
|
|
#include <abstractions/openssl>
|
|
|
|
|
#include <abstractions/php>
|
2020-10-05 12:02:24 +00:00
|
|
|
#include <local/usr.bin.rspamd>
|
2020-10-05 11:06:34 +00:00
|
|
|
|
|
|
|
|
/dev/shm/rhm.* rw,
|
|
|
|
|
/etc/gai.conf r,
|
|
|
|
|
/etc/host.conf r,
|
|
|
|
|
/etc/hosts r,
|
|
|
|
|
/etc/magic r,
|
|
|
|
|
/etc/nsswitch.conf r,
|
|
|
|
|
/etc/resolv.conf r,
|
|
|
|
|
/etc/rspamd/** r,
|
|
|
|
|
/lib/x86_64-linux-gnu/ld-*.so mr,
|
|
|
|
|
/proc/sys/kernel/random/uuid r,
|
|
|
|
|
/usr/bin/rspamd mr,
|
|
|
|
|
/usr/share/rspamd/ r,
|
|
|
|
|
/usr/share/rspamd/** r,
|
|
|
|
|
/var/cache/nscd/hosts r,
|
|
|
|
|
/var/lib/rspamd/ r,
|
|
|
|
|
/var/lib/rspamd/** rwk,
|
|
|
|
|
/var/log/rspamd/rspamd.log* rwk,
|
|
|
|
|
/{var/,}run/rspamd/* rwk,
|
|
|
|
|
|
|
|
|
|
}
|
