/apparmor.d/usr.sbin.mysqld

http://github.com/brinkman83/bashrc · Unknown · 38 lines · 32 code · 6 blank · 0 comment · 0 complexity · ddf5954af131fdb3edab9837abb1fd79 MD5 · raw file 

    

  1. # vim:syntax=apparmor
    2. 

  2. # Last Modified: Tue Jun 19 17:37:30 2007
    3. 

  3. #include <tunables/global>
    4. 

  4. 

  5. /usr/sbin/mysqld {
    6. 

  6.   #include <abstractions/base>
    7. 

  7.   #include <abstractions/nameservice>
    8. 

  8.   #include <abstractions/user-tmp>
    9. 

  9.   #include <abstractions/mysql>
    10. 

  10.   #include <abstractions/winbind>
    11. 

  11. 

  12.   capability dac_override,
    13. 

  13.   capability sys_resource,
    14. 

  14.   capability setgid,
    15. 

  15.   capability setuid,
    16. 

  16. 

  17.   network tcp,
    18. 

  18. 

  19.   /etc/hosts.allow r,
    20. 

  20.   /etc/hosts.deny r,
    21. 

  21. 

  22.   /etc/mysql/*.pem r,
    23. 

  23.   /etc/mysql/conf.d/ r,
    24. 

  24.   /etc/mysql/conf.d/* r,
    25. 

  25.   /etc/mysql/my.cnf r,
    26. 

  26.   /usr/sbin/mysqld mr,
    27. 

  27.   /usr/share/mysql/** r,
    28. 

  28.   /var/log/mysql.log rw,
    29. 

  29.   /var/log/mysql.err rw,
    30. 

  30.   /var/lib/mysql/ r,
    31. 

  31.   /var/lib/mysql/** rwk,
    32. 

  32.   /var/log/mysql/ r,
    33. 

  33.   /var/log/mysql/* rw,
    34. 

  34.   /var/run/mysqld/mysqld.pid w,
    35. 

  35.   /var/run/mysqld/mysqld.sock w,
    36. 

    37. 

  37.   /sys/devices/system/cpu/ r,
    38. 

  38. }
    39.