mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 22:05:27 +00:00
Code Issues Releases Wiki Activity

Allow reading all of /etc/php[578]/** in abstractions/php

Browse Source 
... and with that, make a rule in the php-fpm profile (which missed
php8) superfluous.

Fixes: https://gitlab.com/apparmor/apparmor/-/issues/229

Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c11
This commit is contained in:
Christian Boltz
2022-04-18 20:49:22 +02:00
parent 69302067b0
commit c946f0bf75
2 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
profiles/apparmor.d/abstractions/php
View File

@@ -13,8 +13,7 @@
abi <abi/3.0>, abi <abi/3.0>,
# shared snippets for config files # shared snippets for config files
/etc/php{,5,7,8}/**/ r, /etc/php{,5,7,8}/** r,
/etc/php{,5,7,8}/**.ini r,
# Xlibs # Xlibs
/usr/X11R6/lib{,32,64}/lib*.so* mr, /usr/X11R6/lib{,32,64}/lib*.so* mr,

2
profiles/apparmor.d/php-fpm
View File

@@ -16,8 +16,6 @@ profile php-fpm /usr/sbin/php-fpm* flags=(attach_disconnected) {
# read the system certificates # read the system certificates
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
/etc/php{,5,7}/** r,
capability net_admin, capability net_admin,
# change user/group of a pool # change user/group of a pool
capability setuid, capability setuid,