Commit 10be8f9daf011995d742c8b37c33893066259da6 - unbound

d/apparmor-profile: add comment about the control keys Michael Tokarev 2 years ago

1 changed file(s) with 3 addition(s) and 0 deletion(s). Raw diff Collapse all Expand all

-0

debian/apparmor-profile less more

27	27	# non-chrooted paths
28	28	/etc/unbound/** r,
29	29	owner /etc/unbound/.key rw,
	30	# explicitly deny (and audit) attempts to write to the key files
	31	# this should be unnecessary after switch to /run/unbound.ctl control socket
	32	# (here and below)
30	33	audit deny /etc/unbound/unbound_control.{key,pem} rw,
31	34	audit deny /etc/unbound/unbound_server.key w,
32	35