From 82f7b353ab8f0d0dfdfb0200d6e4913426af0257 Mon Sep 17 00:00:00 2001
From: Christian Boltz <cboltz@opensuse.org>
Date: Jan 05 2022 18:02:08 +0000
Subject: Merge branch 'cboltz-wiki-apparmor' into 'production'


Apache profile: allow /tmp/.ZendSem.* wk in wiki hats

See merge request infra/salt!529
---

diff --git a/salt/profile/wiki/files/httpd2-prefork.apparmor b/salt/profile/wiki/files/httpd2-prefork.apparmor
index ebbd5f4..6731ae7 100644
--- a/salt/profile/wiki/files/httpd2-prefork.apparmor
+++ b/salt/profile/wiki/files/httpd2-prefork.apparmor
@@ -173,6 +173,7 @@ profile httpd2-prefork /usr/sbin/httpd{,2}-prefork flags=(complain,attach_discon
     /srv/www/{{wiki}}.opensuse.org/tmp/php* rw,
     /srv/www/{{wiki}}.opensuse.org/secrets.php r,
     /srv/www/{{wiki}}.opensuse.org/wiki_settings.php r,
+    /tmp/.ZendSem.* wk,
     /usr/share/icu/*/icudt*l.dat r,
     /usr/share/mediawiki_1_*/** r,
     /usr/bin/magick Px -> magick-{{wiki}},