Merge pull request #140 from mdegat01/aa-fix-ssl-compactor

Needs access to ssl cnf file and files in /tmp
mdegat01 · Jan 10, 2022 · 6422590 · 6422590
2 parents f95f0f2 + 51be709
commit 6422590
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/loki/apparmor.txt b/loki/apparmor.txt
@@ -44,6 +44,7 @@ profile loki flags=(attach_disconnected,mediate_deleted) {
   /dev/tty                                    rw,
   @{do_usr}/lib/locale/{,**}                  r,
   @{do_etc}/ssl/openssl.cnf                   r,
+  @{do_etc}/ssl1.1/openssl.cnf                r,
   @{do_etc}/{group,hosts,passwd,resolv.conf}  r,
   /dev/null                                   k,
 
@@ -86,6 +87,7 @@ profile loki flags=(attach_disconnected,mediate_deleted) {
     /share/**                                 r,
 
     # Runtime usage
+    /tmp/marker-view-**                       rw,
     /usr/bin/loki                             rm,
     @{do_etc}/hosts                           r,
     @{do_etc}/{nsswitch,resolv}.conf          r,
@@ -127,5 +129,6 @@ profile loki flags=(attach_disconnected,mediate_deleted) {
     /usr/sbin/nginx                           rm,
     @{do_etc}/{group,passwd}                  r,
     @{do_etc}/ssl/openssl.cnf                 r,
+    @{do_etc}/ssl1.1/openssl.cnf              r,
   }
 }