# Last Modified: Sat Apr  5 03:13:12 2008
#include <tunables/global>
/usr/sbin/apache2 {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/nis>
  #include <abstractions/ssl_certs>

  capability kill,
  capability net_bind_service,
  capability setgid,
  capability setuid,

  /etc/apache2/** r,
  /etc/mailname r,
  /etc/mime.types r,
  /etc/php5/** r,
  /etc/squirrelmail/* r,
  /etc/ssl/private/server.key r,
  /usr/lib/apache2/** mr,
  /usr/lib/php5/** mr,
  /usr/sbin/apache2 mr,
  /usr/share/apache2/** r,
  /usr/share/file/* r,
  /usr/share/squirrelmail/** r,
  /var/lib/php5/* krw,
  /var/lib/squirrelmail/** r,
  /var/log/apache2/* w,
  /var/run/apache2.pid rw,
  /var/run/apache2/* w,
  /var/www/ r,
  /var/www/* r,
  @{HOME}/public_html/ r,
  @{HOME}/public_html/** r,
  @{HOME}/public_html/*/ r,
  @{HOME}/src/*/ r,
  /tmp/** rw,
  /var/lib/squirrelmail/** rw,
  /bin/bash rmix,
  /usr/bin/msmtp rmix,
  /usr/share/** r,
/srv/share/** r,
/srv/share/ r,

/dev/tty rw,

}

  /usr/sbin/apache2//DEFAULT_URI flags=(complain) {
  }

  /usr/sbin/apache2//HANDLING_UNTRUSTED_INPUT flags=(complain) {
  }