Uwe has added the named profile to the bind package

This commit is contained in:
Seth Arnold 2007-05-16 19:09:58 +00:00
parent 2e9a82868f
commit c56f72e512

View file

@ -1,43 +0,0 @@
# $Id$
#
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2005 Novell/SUSE
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# vim:syntax=apparmor
# Last Modified: Wed Aug 17 14:09:24 2005
#include <tunables/global>
/usr/sbin/named {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/xad>
capability net_bind_service,
capability setgid,
capability setuid,
capability sys_chroot,
/** r,
/dyn/** rwl,
/usr/bin/dnskeygen mix,
/usr/bin/dnsquery mix,
/usr/sbin/named rmix,
/usr/sbin/named-xfer mix,
/var/lib/named/** rwl,
/var/named/** rwl,
/var/run/named.pid wl,
/var/run/named/named.pid wl,
/var/run/ndc wl,
/slave/* rw,
/var/opt/novell/xad/ds/krb5kdc/krb5.keytab r,
/var/tmp/DNS_* rw,
/tmp/DNS_* rw,
}