mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 06:16:03 +00:00
Code Issues Releases Wiki Activity

Uwe has added the named profile to the bind package

Browse Source
This commit is contained in:
Seth Arnold
2007-05-16 19:09:58 +00:00
parent 2e9a82868f
commit c56f72e512
1 changed files with 0 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
profiles/apparmor.d/usr.sbin.named
View File

@@ -1,43 +0,0 @@
# $Id$
#
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2005 Novell/SUSE
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# vim:syntax=apparmor
# Last Modified: Wed Aug 17 14:09:24 2005
#include <tunables/global>
/usr/sbin/named {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/xad>
capability net_bind_service,
capability setgid,
capability setuid,
capability sys_chroot,
/** r,
/dyn/** rwl,
/usr/bin/dnskeygen mix,
/usr/bin/dnsquery mix,
/usr/sbin/named rmix,
/usr/sbin/named-xfer mix,
/var/lib/named/** rwl,
/var/named/** rwl,
/var/run/named.pid wl,
/var/run/named/named.pid wl,
/var/run/ndc wl,
/slave/* rw,
/var/opt/novell/xad/ds/krb5kdc/krb5.keytab r,
/var/tmp/DNS_* rw,
/tmp/DNS_* rw,
}