| 1 | # ------------------------------------------------------------------ |
| 2 | # |
| 3 | # Copyright (C) 2002-2005 Novell/SUSE |
| 4 | # |
| 5 | # This program is free software; you can redistribute it and/or |
| 6 | # modify it under the terms of version 2 of the GNU General Public |
| 7 | # License published by the Free Software Foundation. |
| 8 | # |
| 9 | # ------------------------------------------------------------------ |
| 10 | # vim:syntax=apparmor |
| 11 | # Last Modified: Mon Mar 13 15:55:30 2006 |
| 12 | |
| 13 | #include <tunables/global> |
| 14 | |
| 15 | /sbin/resmgrd { |
| 16 | #include <abstractions/base> |
| 17 | #include <abstractions/nameservice> |
| 18 | |
| 19 | capability fowner, |
| 20 | capability chown, |
| 21 | |
| 22 | /dev/** rw, |
| 23 | /etc/resmgr.conf r, |
| 24 | /etc/resmgr.conf.d/ r, |
| 25 | /etc/resmgr.conf.d/*.conf r, |
| 26 | /sbin/resmgrd r, |
| 27 | /{,var/}run/.resmgr_socket lrw, |
| 28 | /{,var/}run/resmgr.pid lrw, |
| 29 | /{,var/}run/fence* lrw, |
| 30 | /{,var/}run/resmgr/classes/** wl, |
| 31 | /{run,var}/lock/LCK* lrw, |
| 32 | } |