mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-09-04 00:05:14 +00:00
Uwe has added the named profile to the bind package
This commit is contained in:
@@ -1,43 +0,0 @@
|
|||||||
# $Id$
|
|
||||||
#
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
#
|
|
||||||
# Copyright (C) 2002-2005 Novell/SUSE
|
|
||||||
#
|
|
||||||
# This program is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2 of the GNU General Public
|
|
||||||
# License published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
# vim:syntax=apparmor
|
|
||||||
# Last Modified: Wed Aug 17 14:09:24 2005
|
|
||||||
|
|
||||||
#include <tunables/global>
|
|
||||||
|
|
||||||
/usr/sbin/named {
|
|
||||||
#include <abstractions/base>
|
|
||||||
#include <abstractions/nameservice>
|
|
||||||
#include <abstractions/xad>
|
|
||||||
|
|
||||||
capability net_bind_service,
|
|
||||||
capability setgid,
|
|
||||||
capability setuid,
|
|
||||||
capability sys_chroot,
|
|
||||||
|
|
||||||
/** r,
|
|
||||||
/dyn/** rwl,
|
|
||||||
/usr/bin/dnskeygen mix,
|
|
||||||
/usr/bin/dnsquery mix,
|
|
||||||
/usr/sbin/named rmix,
|
|
||||||
/usr/sbin/named-xfer mix,
|
|
||||||
/var/lib/named/** rwl,
|
|
||||||
/var/named/** rwl,
|
|
||||||
/var/run/named.pid wl,
|
|
||||||
/var/run/named/named.pid wl,
|
|
||||||
/var/run/ndc wl,
|
|
||||||
/slave/* rw,
|
|
||||||
|
|
||||||
/var/opt/novell/xad/ds/krb5kdc/krb5.keytab r,
|
|
||||||
/var/tmp/DNS_* rw,
|
|
||||||
/tmp/DNS_* rw,
|
|
||||||
}
|
|
Reference in New Issue
Block a user