mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-30 22:05:27 +00:00
Allow reading all of /etc/php[578]/** in abstractions/php
... and with that, make a rule in the php-fpm profile (which missed php8) superfluous. Fixes: https://gitlab.com/apparmor/apparmor/-/issues/229 Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1186267#c11
This commit is contained in:
@@ -13,8 +13,7 @@
|
||||
abi <abi/3.0>,
|
||||
|
||||
# shared snippets for config files
|
||||
/etc/php{,5,7,8}/**/ r,
|
||||
/etc/php{,5,7,8}/**.ini r,
|
||||
/etc/php{,5,7,8}/** r,
|
||||
|
||||
# Xlibs
|
||||
/usr/X11R6/lib{,32,64}/lib*.so* mr,
|
||||
|
@@ -16,8 +16,6 @@ profile php-fpm /usr/sbin/php-fpm* flags=(attach_disconnected) {
|
||||
# read the system certificates
|
||||
include <abstractions/ssl_certs>
|
||||
|
||||
/etc/php{,5,7}/** r,
|
||||
|
||||
capability net_admin,
|
||||
# change user/group of a pool
|
||||
capability setuid,
|
||||
|
Reference in New Issue
Block a user