| 1 | # ------------------------------------------------------------------ |
| 2 | # |
| 3 | # Copyright (C) 2002-2006 Novell/SUSE |
| 4 | # |
| 5 | # This program is free software; you can redistribute it and/or |
| 6 | # modify it under the terms of version 2 of the GNU General Public |
| 7 | # License published by the Free Software Foundation. |
| 8 | # |
| 9 | # ------------------------------------------------------------------ |
| 10 | # vim:syntax=apparmor |
| 11 | |
| 12 | #include <tunables/global> |
| 13 | |
| 14 | /usr/sbin/squid { |
| 15 | #include <abstractions/base> |
| 16 | #include <abstractions/consoles> |
| 17 | #include <abstractions/kerberosclient> |
| 18 | #include <abstractions/nameservice> |
| 19 | |
| 20 | capability setgid, |
| 21 | capability setuid, |
| 22 | |
| 23 | /usr/lib/squid/* rmix, |
| 24 | /usr/sbin/squid rmix, |
| 25 | /usr/sbin/unlinkd mixr, |
| 26 | |
| 27 | /var/cache/squid/** lrw, |
| 28 | |
| 29 | /dev/tty rw, |
| 30 | /etc/mtab r, |
| 31 | /etc/squid/* r, |
| 32 | @{PROC}/[0-9]*/mounts r, |
| 33 | @{PROC}/mounts r, |
| 34 | /usr/share/squid/** r, |
| 35 | /var/log/squid/access.log w, |
| 36 | /var/log/squid/cache.log rw, |
| 37 | /var/log/squid/store.log w, |
| 38 | /{,var/}run/squid.pid lrw, |
| 39 | |
| 40 | /usr/sbin/digest_pw_auth rmix, |
| 41 | /usr/sbin/diskd rmix, |
| 42 | /usr/sbin/getpwname_auth rmix, |
| 43 | /usr/sbin/ip_user_check rmix, |
| 44 | /usr/sbin/msnt_auth rmix, |
| 45 | /usr/sbin/ncsa_auth rmix, |
| 46 | /usr/sbin/no_check.pl rmix, |
| 47 | /usr/sbin/ntlm_auth rmix, |
| 48 | /usr/sbin/pam_auth rmix, |
| 49 | /usr/sbin/rcsquid rmix, |
| 50 | /usr/sbin/smb_auth rmix, |
| 51 | /usr/sbin/smb_auth.pl rmix, |
| 52 | /usr/sbin/smb_auth.sh rmix, |
| 53 | /usr/sbin/squid rmix, |
| 54 | /usr/sbin/squid_ldap_auth rmix, |
| 55 | /usr/sbin/squid_ldap_group rmix, |
| 56 | /usr/sbin/squid_ldapauth rmix, |
| 57 | /usr/sbin/squid_unix_group rmix, |
| 58 | /usr/sbin/squidclient rmix, |
| 59 | /usr/sbin/unlinkd rmix, |
| 60 | /usr/sbin/wbinfo_group.pl rmix, |
| 61 | /usr/sbin/yp_auth rmix, |
| 62 | |
| 63 | } |