mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 06:45:38 +00:00
Code Issues Releases Wiki Activity

php-fpm: fix profile name in signal and change_profile rule

Browse Source 
Note: the change_profile rule was not really correct and only worked by
accident. We want to specify the target profile, therefore add the '->'.
This commit is contained in:
Christian Boltz
2020-08-28 22:40:21 +02:00
parent 3a4dc1f885
commit 9892a03270
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/usr.sbin.php-fpm
View File

@@ -46,10 +46,10 @@ profile php-fpm /usr/sbin/php-fpm* flags=(attach_disconnected) {
deny / rw, deny / rw,
# allow sending signals to our subprocesses # allow sending signals to our subprocesses
signal (send) peer=/usr/sbin/php-fpm*//*, signal (send) peer=php-fpm//*,
# allow switching processes to those subprofiles # allow switching processes to those subprofiles
change_profile /usr/sbin/php-fpm*//*, change_profile -> php-fpm//*,
# load all files from this directory # load all files from this directory
# store your configurations per pool in this dir # store your configurations per pool in this dir