aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStefan Bühler <stbuehler@web.de>2014-06-02 10:49:49 +0000
committerStefan Bühler <stbuehler@web.de>2014-06-02 10:49:49 +0000
commita032343dbb877a4cc46259a53460dcb7b1faa3fa (patch)
tree73047191e1c150708c4e59cebe235b47b7a85047
parent4b14ad8ff4a98e605cdbcd5a4cc590df4be3dee0 (diff)
downloadspawn-fcgi-a032343dbb877a4cc46259a53460dcb7b1faa3fa.tar.gz
spawn-fcgi-a032343dbb877a4cc46259a53460dcb7b1faa3fa.zip
Add AppArmor abstraction usage example
From: Stefan Bühler <stbuehler@web.de> git-svn-id: svn://svn.lighttpd.net/spawn-fcgi/trunk@66 4a9f3682-ca7b-49a8-9a55-ba4640e46f83
-rw-r--r--doc/apparmor.d-abstractions-spawn-fcgi26
1 files changed, 25 insertions, 1 deletions
diff --git a/doc/apparmor.d-abstractions-spawn-fcgi b/doc/apparmor.d-abstractions-spawn-fcgi
index 4e5f16a..eda3594 100644
--- a/doc/apparmor.d-abstractions-spawn-fcgi
+++ b/doc/apparmor.d-abstractions-spawn-fcgi
@@ -1,7 +1,31 @@
# /etc/apparmor.d/abstractions/spawn-fcgi
#
-# a spawn-fcgi profile should include this abstraction
+# a (nested) spawn-fcgi profile should include this abstraction
# and a rule to execute the FastCGI application itself
+#
+# Example for runit (or daemontools) service "foo" starting php:
+#
+# #include <tunables/global>
+# /etc/sv/foo/run {
+# #include <abstractions/base>
+# /bin/dash ix,
+# /etc/sv/foo/run r,
+#
+# # spawn-fcgi + alternatives handling in debian
+# /usr/bin/spawn-fcgi* px -> /etc/sv/foo/run//spawn-fcgi,
+#
+# profile spawn-fcgi {
+# #include <abstractions/spawn-fcgi>
+# /usr/bin/php5-cgi px -> /etc/sv/foo/run//php,
+# }
+#
+# profile php {
+# #include <abstractions/base>
+# #include <abstractions/php5>
+# /var/www/** r,
+# }
+# }
+
#include <abstractions/base>
#include <abstractions/nameservice>