usr.sbin.squid

   1 # ------------------------------------------------------------------
   2 #
   3 #    Copyright (C) 2002-2006 Novell/SUSE
   4 #
   5 #    This program is free software; you can redistribute it and/or
   6 #    modify it under the terms of version 2 of the GNU General Public
   7 #    License published by the Free Software Foundation.
   8 #
   9 # ------------------------------------------------------------------
  10 # vim:syntax=apparmor
  11
  12 #include <tunables/global>
  13
  14 /usr/sbin/squid {
  15   #include <abstractions/base>
  16   #include <abstractions/consoles>
  17   #include <abstractions/kerberosclient>
  18   #include <abstractions/nameservice>
  19
  20   capability setgid,
  21   capability setuid,
  22
  23   /usr/lib/squid/* rmix,
  24   /usr/sbin/squid rmix,
  25   /usr/sbin/unlinkd mixr,
  26
  27   /var/cache/squid/** lrw,
  28
  29   /dev/tty rw,
  30   /etc/mtab r,
  31   /etc/squid/* r,
  32   @{PROC}/[0-9]*/mounts r,
  33   @{PROC}/mounts r,
  34   /usr/share/squid/** r,
  35   /var/log/squid/access.log w,
  36   /var/log/squid/cache.log rw,
  37   /var/log/squid/store.log w,
  38   /{,var/}run/squid.pid lrw,
  39
  40   /usr/sbin/digest_pw_auth   rmix,
  41   /usr/sbin/diskd   rmix,
  42   /usr/sbin/getpwname_auth   rmix,
  43   /usr/sbin/ip_user_check   rmix,
  44   /usr/sbin/msnt_auth   rmix,
  45   /usr/sbin/ncsa_auth   rmix,
  46   /usr/sbin/no_check.pl   rmix,
  47   /usr/sbin/ntlm_auth   rmix,
  48   /usr/sbin/pam_auth   rmix,
  49   /usr/sbin/rcsquid   rmix,
  50   /usr/sbin/smb_auth   rmix,
  51   /usr/sbin/smb_auth.pl   rmix,
  52   /usr/sbin/smb_auth.sh   rmix,
  53   /usr/sbin/squid   rmix,
  54   /usr/sbin/squid_ldap_auth   rmix,
  55   /usr/sbin/squid_ldap_group   rmix,
  56   /usr/sbin/squid_ldapauth   rmix,
  57   /usr/sbin/squid_unix_group   rmix,
  58   /usr/sbin/squidclient   rmix,
  59   /usr/sbin/unlinkd   rmix,
  60   /usr/sbin/wbinfo_group.pl   rmix,
  61   /usr/sbin/yp_auth   rmix,
  62
  63 }