From c759ed3563a166c4f908c465237d63471dfe2308 Mon Sep 17 00:00:00 2001
From: Christian Boltz <opensuse@cboltz.de>
Date: Sep 13 2017 17:27:53 +0000
Subject: More write access for the wiki


Allow writing $wiki/images/deleted/.htaccess ("deny from all") and
$wiki/images/temp/mw-runJobs-backoffs.json

---

diff --git a/salt/profile/wiki/files/httpd2-prefork.apparmor b/salt/profile/wiki/files/httpd2-prefork.apparmor
index 69ddd2d..2c27c4a 100644
--- a/salt/profile/wiki/files/httpd2-prefork.apparmor
+++ b/salt/profile/wiki/files/httpd2-prefork.apparmor
@@ -147,12 +147,14 @@ profile httpd2-prefork /usr/sbin/httpd{,2}-prefork flags=(complain,attach_discon
     /srv/www/{{wiki}}.opensuse.org/public/images/**/ rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/**.@{wiki_upload_extensions} rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/deleted/**/index.html rw,
+    /srv/www/{{wiki}}.opensuse.org/public/images/deleted/.htaccess rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/lockdir/*.lock rwk,
     /srv/www/{{wiki}}.opensuse.org/public/images/temp/*/*/*\!localcopy_*. rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/temp/*/*/*\!php??????. rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/temp/**/index.html rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/temp/.htaccess rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/temp/localcopy_* rw,
+    /srv/www/{{wiki}}.opensuse.org/public/images/temp/mw-runJobs-backoffs.json rwk,
     /srv/www/{{wiki}}.opensuse.org/public/images/temp/ResourceLoaderImage?????? rw,
     /srv/www/{{wiki}}.opensuse.org/public/images/temp/svg_*/ rw,
     /srv/www/{{wiki}}.opensuse.org/tmp/php* rw,