# Last Modified: Tue Feb 5 18:19:12 2013
#include <tunables/global>
/usr/lib/apache2/mpm-prefork/apache2 {
#include <abstractions/base>
#include <abstractions/nameservice>
capability dac_override,
capability kill,
capability setgid,
capability setuid,
/bin/dash rix,
/bin/which rix,
/etc/apache2/apache2.conf r,
/etc/apache2/conf.d/ r,
/etc/apache2/conf.d/** r,
/etc/apache2/httpd.conf r,
/etc/apache2/mods-available/ r,
/etc/apache2/mods-available/** r,
/etc/apache2/mods-enabled/ r,
/etc/apache2/mods-enabled/** r,
/etc/apache2/ports.conf r,
/etc/apache2/sites-available/ r,
/etc/apache2/sites-available/** r,
/etc/apache2/sites-enabled/ r,
/etc/apache2/sites-enabled/** r,
/etc/magic r,
/etc/mime.types r,
/etc/modsecurity/ r,
/etc/modsecurity/** r,
/etc/php5/apache2/php.ini r,
/etc/php5/conf.d/ r,
/etc/php5/conf.d/** r,
# this ssl key should be change according to your ssl certificate
/etc/ssl/private/ssl-cert-snakeoil.key r,
/proc/*/auxv r,
/run/apache2.pid rw,
/run/apache2/mutex wk,
/run/apache2/ssl_mutex wk,
/tmp/** rw,
/usr/bin/file rix,
/usr/lib{,32,64}/** mr,
/usr/share/file/magic.mgc r,
/usr/share/mysql/charsets/Index.xml r,
/var/lib/apache2/fcgid/shm w,
/var/lib/php5/** rwk,
/var/log/apache2/** w,
/var/log/apache2/modsec_audit.log r,
/var/www/owncloud/ r,
/var/www/owncloud/.htaccess r,
/var/www/owncloud/3rdparty/** r,
/var/www/owncloud/apps/ r,
/var/www/owncloud/apps/** r,
/var/www/owncloud/config/config.php r,
/var/www/owncloud/core/** r,
/var/www/owncloud/cron.php r,
/var/www/owncloud/data/** rw,
/var/www/owncloud/data/.htaccess r,
/var/www/owncloud/index.php r,
/var/www/owncloud/lib/** r,
/var/www/owncloud/remote.php r,
/var/www/owncloud/search/** r,
/var/www/owncloud/settings/** r,
/var/www/owncloud/status.php r,
^DEFAULT_URI {
}
^HANDLING_UNTRUSTED_INPUT {
}
}