|
|
|
@ -1,6 +1,6 @@
|
|
|
|
|
#include <tunables/global>
|
|
|
|
|
|
|
|
|
|
/var/webservers/mc.wg.banananet.work/launch {
|
|
|
|
|
{{ launch_script }} {
|
|
|
|
|
#include <abstractions/base>
|
|
|
|
|
#include <abstractions/bash>
|
|
|
|
|
#include <abstractions/nameservice>
|
|
|
|
@ -12,7 +12,7 @@
|
|
|
|
|
/usr/lib/jvm/java-11-openjdk-amd64/bin/java mrix,
|
|
|
|
|
/usr/lib/jvm/java-11-openjdk-amd64/lib/server/classes.jsa mr,
|
|
|
|
|
/usr/share/java/java-atk-wrapper.jar r,
|
|
|
|
|
/var/webservers/mc.wg.banananet.work/launch r,
|
|
|
|
|
{{ launch_script }} r,
|
|
|
|
|
/proc/sys/net/core/somaxconn r,
|
|
|
|
|
/proc/sys/net/ipv4/tcp_fastopen r,
|
|
|
|
|
owner /proc/@{pid}/coredump_filter rw,
|
|
|
|
@ -20,8 +20,8 @@
|
|
|
|
|
/proc/@{pid}/net/ipv6_route r,
|
|
|
|
|
owner /proc/@{pid}/mountinfo r,
|
|
|
|
|
owner /tmp/libnetty_transport_native_epoll_x86_*.so mrw,
|
|
|
|
|
owner /var/webservers/mc.wg.banananet.work/bin/server.*.jar r,
|
|
|
|
|
owner /var/webservers/mc.wg.banananet.work/data/ rw,
|
|
|
|
|
owner /var/webservers/mc.wg.banananet.work/data/** rw,
|
|
|
|
|
owner {{ installation_directory }}/server.*.jar r,
|
|
|
|
|
owner {{ data_directory }}/ rw,
|
|
|
|
|
owner {{ data_directory }}/** rw,
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|