1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
# vim:syntax=apparmor
# Created for Ubuntu by: Dustin Kirkland <kirkland@ubuntu.com>
# ------------------------------------------------------------------
#
# Copyright (C) 2014 Dustin Kirkland
# Copyright (C) 2014 Canonical Ltd.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 3 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
#include <tunables/global>
/usr/bin/pollen {
#include <abstractions/base>
#include <abstractions/nameservice>
capability net_bind_service,
/dev/random rw,
/dev/urandom rw,
/etc/pollen/* r,
/proc/sys/net/core/somaxconn r,
/proc/sys/kernel/hostname r,
/proc/sys/kernel/random/entropy_avail r,
/usr/bin/pollen r,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.bin.pollen>
}
|
