Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. # Last Modified: Mon Oct 29 01:20:30 2012
  2. #include <tunables/global>
  3.  
  4. /usr/sbin/hiawatha {
  5. #include <abstractions/apache2-common>
  6. #include <abstractions/base>
  7. #include <abstractions/nameservice>
  8. #include <abstractions/php5>
  9.  
  10. capability chown,
  11. capability dac_override,
  12. capability fowner,
  13. capability fsetid,
  14. capability setgid,
  15. capability setuid,
  16.  
  17.  
  18.  
  19. /bin/dash rix,
  20. /etc/ImageMagick/policy.xml r,
  21. owner /etc/hiawatha/ r,
  22. /etc/hiawatha/** r,
  23. /etc/host.conf r,
  24. /etc/hosts r,
  25. /etc/mailname r,
  26. /etc/nsswitch.conf r,
  27. owner /etc/passwd r,
  28. /etc/php5/ r,
  29. /etc/php5/** r,
  30. /etc/postfix/** r,
  31. /etc/protocols r,
  32. /etc/resolv.conf r,
  33. /etc/services r,
  34. /etc/snmp/snmp.conf r,
  35. /proc/*/auxv r,
  36. owner /run/ r,
  37. owner /run/** w,
  38. /run/** r,
  39. /sys/devices/system/cpu/ r,
  40. owner /tmp/** rwk,
  41. /usr/bin/php5-cgi rix,
  42. /usr/lib/postfix/cleanup rix,
  43. /usr/lib{,32,64}/** mr,
  44. /usr/sbin/cgi-wrapper rix,
  45. /usr/sbin/postdrop rix,
  46. /usr/sbin/sendmail rix,
  47. /usr/share/ r,
  48. /usr/share/** r,
  49. /var/lib/ r,
  50. /var/lib/** r,
  51. /var/lib/*/ rw,
  52. /var/lib/hiawatha/** rw,
  53. owner /var/lib/php5/** rw,
  54. owner /var/log/hiawatha/** w,
  55. /var/log/hiawatha/** r,
  56. owner /var/run/ r,
  57. owner /var/run/** w,
  58. /var/run/** r,
  59. /var/spool/postfix/** rw,
  60. /var/spool/postfix/pid/** wk,
  61. /var/www/ r,
  62. /var/www/** rk,
  63. /var/www/banshee/logfiles/** rw,
  64. /var/www/banshee/hashes/** r,
  65. /var/www/monitor/logfiles/** rw,
  66. /var/www/infosec/banshee/logfiles/** rw,
  67. }