apparmor/profiles/extras/sbin.dhclient
Seth Arnold 087c48b35e r3527@dhcp-81: root | 2006-08-02 15:33:07 -0700
Fix up the m, U, and P stuff, and other misc fixes
2006-08-04 18:13:59 +00:00

56 lines
1.9 KiB
Text

# $Id$
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2005 Novell/SUSE
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# Note that this profile doesn't include any NetDomain rules; dhclient uses
# raw sockets, and thus cannot be confined with NetDomain
#
# Should these programs have their own domains?
# /bin/ps mixr,
# /sbin/arp rmix,
# /usr/bin/dig rmix,
# /usr/bin/uptime rmix,
# /usr/bin/vmstat rmix,
# /usr/bin/w rmix,
#include <tunables/global>
/sbin/dhclient {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
/sbin/dhclient rmix,
/sbin/dhclient-script rmix,
/bin/bash rmix,
/bin/df rmix,
/bin/netstat Px,
/bin/ps mixr,
/dev/random r,
/etc/dhclient.conf r,
/proc/ r,
/proc/interrupts r,
/proc/net/dev r,
/proc/rtc r,
/proc/self/status r,
/proc/stat r,
/sbin/arp rmix,
/usr/bin/dig rmix,
/usr/bin/uptime rmix,
/usr/bin/vmstat rmix,
/usr/bin/w rmix,
/var/lib/dhcp/dhclient.leases rw,
/var/lib/dhcp/dhclient-*.leases rw,
/var/log/lastlog r,
/var/log/messages r,
/var/log/wtmp r,
/var/run/dhclient.pid rw,
/var/run/dhclient-*.pid rw,
/var/spool r,
/var/spool/mail r,
}