OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/20/2025 05:23:23 PM	rwxr-xr-x
📁 abstractions	-	05/09/2024 07:14:29 AM	rwxr-xr-x
📁 cache	-	05/19/2025 07:54:53 AM	rwxr-xr-x
📁 disable	-	10/21/2019 03:48:36 PM	rwxr-xr-x
📁 force-complain	-	04/24/2018 02:47:41 PM	rwxr-xr-x
📁 local	-	10/28/2024 08:41:33 AM	rwxr-xr-x
📁 lxc	-	05/09/2024 07:15:54 AM	rwxr-xr-x
📄 lxc-containers	198 bytes	11/23/2018 04:49:34 AM	rw-r--r--
📄 sbin.dhclient	3.12 KB	03/26/2018 09:00:31 PM	rw-r--r--
📁 tunables	-	05/09/2024 07:14:29 AM	rwxr-xr-x
📄 ubuntu_pro_apt_news	1.98 KB	09/06/2024 11:58:19 PM	rw-r--r--
📄 ubuntu_pro_esm_cache	7.33 KB	09/06/2024 11:58:19 PM	rw-r--r--
📄 usr.bin.lxc-start	125 bytes	11/23/2018 04:49:34 AM	rw-r--r--
📄 usr.bin.man	2.79 KB	04/07/2018 11:14:41 AM	rw-r--r--
📄 usr.lib.snapd.snap-confine.real	27.82 KB	05/29/2023 12:10:12 PM	rw-r--r--
📄 usr.sbin.mysqld	1.75 KB	01/21/2020 02:10:07 PM	rw-r--r--
📄 usr.sbin.rsyslogd	1.51 KB	04/24/2018 01:15:46 PM	rw-r--r--
📄 usr.sbin.slapd	1.2 KB	05/12/2022 01:52:38 PM	rw-r--r--
📄 usr.sbin.tcpdump	1.42 KB	02/10/2023 06:11:16 PM	rw-r--r--

Name

Size

Modified

Perms

📁 ..

05/20/2025 05:23:23 PM

rwxr-xr-x

📁 abstractions

05/09/2024 07:14:29 AM

rwxr-xr-x

📁 cache

05/19/2025 07:54:53 AM

rwxr-xr-x

📁 disable

10/21/2019 03:48:36 PM

rwxr-xr-x

📁 force-complain

04/24/2018 02:47:41 PM

rwxr-xr-x

📁 local

10/28/2024 08:41:33 AM

rwxr-xr-x

📁 lxc

05/09/2024 07:15:54 AM

rwxr-xr-x

📄 lxc-containers

198 bytes

11/23/2018 04:49:34 AM

rw-r--r--

📄 sbin.dhclient

3.12 KB

03/26/2018 09:00:31 PM

rw-r--r--

📁 tunables

05/09/2024 07:14:29 AM

rwxr-xr-x

📄 ubuntu_pro_apt_news

1.98 KB

09/06/2024 11:58:19 PM

rw-r--r--

📄 ubuntu_pro_esm_cache

7.33 KB

09/06/2024 11:58:19 PM

rw-r--r--

📄 usr.bin.lxc-start

125 bytes

11/23/2018 04:49:34 AM

rw-r--r--

📄 usr.bin.man

2.79 KB

04/07/2018 11:14:41 AM

rw-r--r--

📄 usr.lib.snapd.snap-confine.real

27.82 KB

05/29/2023 12:10:12 PM

rw-r--r--

📄 usr.sbin.mysqld

1.75 KB

01/21/2020 02:10:07 PM

rw-r--r--

📄 usr.sbin.rsyslogd

1.51 KB

04/24/2018 01:15:46 PM

rw-r--r--

📄 usr.sbin.slapd

1.2 KB

05/12/2022 01:52:38 PM

rw-r--r--

📄 usr.sbin.tcpdump

1.42 KB

02/10/2023 06:11:16 PM

rw-r--r--

Editing: usr.sbin.slapd

# vim:syntax=apparmor
# Last Modified: Fri Jun  6 13:51:00 2020
# Author: Jamie Strandboge <jamie@ubuntu.com>

#include <tunables/global>

/usr/sbin/slapd {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/p11-kit>

#include <abstractions/ssl_certs>
  /etc/ssl/private/ r,
  /etc/ssl/private/* r,

/etc/sasldb2 r,

capability dac_override,
  capability net_bind_service,
  capability setgid,
  capability setuid,

/etc/gai.conf r,
  /etc/hosts.allow r,
  /etc/hosts.deny r,

# ldap files
  /etc/ldap/** kr,
  /etc/ldap/slapd.d/** rw,

# kerberos/gssapi
  /dev/tty rw,
  /etc/gss/mech.d/   r,
  /etc/gss/mech.d/* kr,
  /etc/krb5.keytab kr,
  /etc/krb5/user/*/client.keytab kr,
  owner /tmp/krb5cc_* rwk,
  /var/tmp/ rw,
  /var/tmp/** rw,

# the databases and logs
  /var/lib/ldap/ r,
  /var/lib/ldap/** rwk,

# lock file
  /var/lib/ldap/alock kw,

# pid files and sockets
  /{,var/}run/slapd/* w,
  /{,var/}run/slapd/ldapi rw,
  /{,var/}run/nslcd/socket rw,
  /{,var/}run/saslauthd/mux rw,

/usr/lib/ldap/ r,
  /usr/lib/ldap/* mr,

/usr/sbin/slapd mr,

# Site-specific additions and overrides. See local/README for details.
  #include <local/usr.sbin.slapd>
}