Conversation

Notices

1. headcrack (headcrack@headcrack.cf)'s status on Tuesday, 08-Aug-2017 23:25:15 CEST headcrack
   Threema, Signal usw. bieten nichts, was nicht auch OMEMO kann. Ohne persönliche Daten preiszugeben oder proprietäre Software zu nutzen.
   • headcrack (headcrack@headcrack.cf)'s status on Tuesday, 08-Aug-2017 23:39:39 CEST headcrack
     Aber nicht vergessen...
     hc@grufty:~/ansible/roles/apparmor/files % cat usr.bin.prosody
     #include <tunables/global>
     
     /usr/bin/prosody {
     #include <abstractions/base>
     
     network inet stream,
     network inet dgram,
     network inet6 stream,
     network inet6 dgram,
     
     capability dac_override,
     capability dac_read_search,
     
     /etc/resolv.conf r,
     /etc/prosody/** r,
     /etc/letsencrypt/** r,
     /etc/ssl/certs/** r,
     /etc/mime.types r,
     
     /var/log/prosody/* wr,
     
     /usr/lib/prosody/** m,
     /var/lib/prosody/** rw,
     
     /var/cache/nscd/** r,
     
     /{,var/}run/prosody/* rwk,
     /run/resolvconf/* r,
     
     /usr/share/lua/** r,
     /usr/share/mysql/** r,
     /usr/local/share/prosody-modules/** r,
     /usr/share/ca-certificates/** r,
     
     /usr/bin/lua5.1 ix,
     /usr/bin/prosody r,
     
     /var/cache/nscd/{passwd,group,services,hosts} mrk,
     }
     
     hc@grufty:~/ansible/roles/apparmor/files %