92bc3717 |
1 | # ------------------------------------------------------------------ |
2 | # |
3 | # Copyright (C) 2002-2006 Novell/SUSE |
4 | # |
5 | # This program is free software; you can redistribute it and/or |
6 | # modify it under the terms of version 2 of the GNU General Public |
7 | # License published by the Free Software Foundation. |
8 | # |
9 | # ------------------------------------------------------------------ |
10 | # vim:syntax=apparmor |
11 | |
12 | #include <tunables/global> |
13 | |
14 | /usr/sbin/squid { |
15 | #include <abstractions/base> |
16 | #include <abstractions/consoles> |
17 | #include <abstractions/kerberosclient> |
18 | #include <abstractions/nameservice> |
19 | |
20 | capability setgid, |
21 | capability setuid, |
22 | |
23 | /usr/lib/squid/* rmix, |
24 | /usr/sbin/squid rmix, |
25 | /usr/sbin/unlinkd mixr, |
26 | |
27 | /var/cache/squid/** lrw, |
28 | |
29 | /dev/tty rw, |
30 | /etc/mtab r, |
31 | /etc/squid/* r, |
32 | @{PROC}/[0-9]*/mounts r, |
33 | @{PROC}/mounts r, |
34 | /usr/share/squid/** r, |
35 | /var/log/squid/access.log w, |
36 | /var/log/squid/cache.log rw, |
37 | /var/log/squid/store.log w, |
38 | /{,var/}run/squid.pid lrw, |
39 | |
40 | /usr/sbin/digest_pw_auth rmix, |
41 | /usr/sbin/diskd rmix, |
42 | /usr/sbin/getpwname_auth rmix, |
43 | /usr/sbin/ip_user_check rmix, |
44 | /usr/sbin/msnt_auth rmix, |
45 | /usr/sbin/ncsa_auth rmix, |
46 | /usr/sbin/no_check.pl rmix, |
47 | /usr/sbin/ntlm_auth rmix, |
48 | /usr/sbin/pam_auth rmix, |
49 | /usr/sbin/rcsquid rmix, |
50 | /usr/sbin/smb_auth rmix, |
51 | /usr/sbin/smb_auth.pl rmix, |
52 | /usr/sbin/smb_auth.sh rmix, |
53 | /usr/sbin/squid rmix, |
54 | /usr/sbin/squid_ldap_auth rmix, |
55 | /usr/sbin/squid_ldap_group rmix, |
56 | /usr/sbin/squid_ldapauth rmix, |
57 | /usr/sbin/squid_unix_group rmix, |
58 | /usr/sbin/squidclient rmix, |
59 | /usr/sbin/unlinkd rmix, |
60 | /usr/sbin/wbinfo_group.pl rmix, |
61 | /usr/sbin/yp_auth rmix, |
62 | |
63 | } |