mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-02 07:15:18 +00:00
Code Issues Releases Wiki Activity

Update apache2-common so that other processes can trace the hats that include this file. The main includes abstractions/base which has these lines in it, which is why ss -tnlp sometimes fails.

Browse Source 
See also: https://bugs.debian.org/1003153 for more details about how this occurs.
This commit is contained in:
Craig Small
2022-02-17 07:57:55 +00:00
parent e71e27c574
commit 071935b914
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/abstractions/apache2-common
View File

@@ -6,6 +6,10 @@
include <abstractions/nameservice> include <abstractions/nameservice>
# Allow other processes to read our /proc entries
ptrace (readby),
# Allow other processes to trace us by default
ptrace (tracedby),
# Allow unconfined processes to send us signals by default # Allow unconfined processes to send us signals by default
signal (receive) peer=unconfined, signal (receive) peer=unconfined,
# Allow apache to send us signals by default # Allow apache to send us signals by default