mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-04 16:25:10 +00:00
Code Issues Releases Wiki Activity

abstractions/ssl_{certs,keys}: allow reading ocsp.der maintained by dehydrated for OCSP stapling

Browse Source 
Signed-off-by: Simon Deziel <simon@sdeziel.info>
This commit is contained in:
Simon Deziel
2019-01-03 08:31:06 -05:00
parent c5a89d5daf
commit 04b2842e1c
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
profiles/apparmor.d/abstractions/ssl_certs
View File

@@ -32,6 +32,7 @@
/{etc,var/lib}/dehydrated/certs/*/cert*.pem r, /{etc,var/lib}/dehydrated/certs/*/cert*.pem r,
/{etc,var/lib}/dehydrated/certs/*/chain*.pem r, /{etc,var/lib}/dehydrated/certs/*/chain*.pem r,
/{etc,var/lib}/dehydrated/certs/*/fullchain*.pem r, /{etc,var/lib}/dehydrated/certs/*/fullchain*.pem r,
/{etc,var/lib}/dehydrated/certs/*/ocsp*.der r,
# certbot # certbot
/etc/letsencrypt/archive/*/cert*.pem r, /etc/letsencrypt/archive/*/cert*.pem r,