SHA256
1
0
forked from pool/haproxy
haproxy/usr.sbin.haproxy.apparmor
Kristoffer Gronlund e4707d93a4 Accepting request 546033 from home:darix:branches:server:http
- [apparmor]: allow haproxy to restart itself. needed for seamless
  restart. also reload the apparmor profile on update.

- enable network namespaces on 42.3
- Enabled systemd notify mode: new BR: pkgconfig(libsystemd)
  This fixes problems with starting 1.8 on 42.3.
- apply build option changes as adviced by upstream

- Update to version 1.8.0:
  https://www.mail-archive.com/haproxy@formilux.org/msg28004.html

OBS-URL: https://build.opensuse.org/request/show/546033
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=150
2017-11-27 15:03:06 +00:00

33 lines
712 B
Plaintext

#include <tunables/global>
/usr/sbin/haproxy {
#include <abstractions/base>
#include <abstractions/nameservice>
capability net_bind_service,
capability setgid,
capability setuid,
capability kill,
capability sys_resource,
capability sys_chroot,
# those are needed for the stats socket creation
capability chown,
capability fowner,
capability fsetid,
network inet tcp,
network inet6 tcp,
/etc/haproxy/* r,
/usr/sbin/haproxy rmix,
/var/lib/haproxy/stats rwl,
/var/lib/haproxy/stats.*.bak rwl,
/var/lib/haproxy/stats.*.tmp rwl,
/{,var/}run/haproxy.pid rw,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.haproxy>
}