pissircd/extras/security/apparmor/unrealircd
Bram Matthys fc0c06621b
AppArmor: use a more generic rule for data/ now that we have all these
databases, and who knows what else the user has (think: 3rd party modules).
2019-08-18 18:42:33 +02:00

27 lines
852 B
Text

# AppArmor profile for UnrealIRCd 5
#
# Note that you may still see some DENIED warnings in logs with
# operation="chmod". These are harmless and can be safely ignored.
#
# Tested on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS
#
# IMPORTANT: you will have to modify the path to executable below
# if it's not /home/ircd/unrealircd/bin/unrealircd !
#include <tunables/global>
# Change the pathname of your UnrealIRCd executable here:
/home/ircd/unrealircd/bin/unrealircd {
#include <abstractions/base>
#include <abstractions/nameservice>
@{HOME}/unrealircd/conf/ r,
@{HOME}/unrealircd/conf/** r,
@{HOME}/unrealircd/data/** rw,
@{HOME}/unrealircd/lib/*.so* mr,
@{HOME}/unrealircd/logs/* rw,
@{HOME}/unrealircd/modules/**.so r,
@{HOME}/unrealircd/tmp/ r,
@{HOME}/unrealircd/tmp/* mrw,
@{HOME}/unrealircd/bin/unrealircd mr,
}