apparmor/profiles/abstractions/nameservice

55 lines
1.8 KiB
Text

# $Id$
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2005 Novell/SUSE
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# Many programs wish to perform nameservice-like operations, such as
# looking up users by name or id, groups by name or id, hosts by name
# or IP, etc. These operations may be performed through files, dns,
# NIS, NIS+, LDAP, hesiod, wins, etc. Allow them all here.
/etc/group r,
/etc/host.conf r,
/etc/hosts r,
/etc/ldap.conf r,
/etc/ldap.secret r,
/etc/nsswitch.conf r,
/etc/passwd r,
/etc/protocols r,
/etc/resolv.conf r,
/etc/samba/lmhosts r,
/etc/services r,
# all openldap config
/etc/openldap/* r,
# The Name Service Cache Daemon can cache lookups, sometimes leading
# to vast speed increases when working with network-based lookups.
/var/run/.nscd_socket rw,
/var/run/nscd/socket rw,
/var/run/nscd/passwd rmix,
/var/run/nscd/group rmix,
# nscd renames and unlinks files in it's operation that clients will
# have open
/var/run/nscd/db* rmix,
# The nss libraries are sometimes used in addition to PAM; make sure
# they are available
/lib64/libnss_*.so* mr,
/lib/libnss_*.so* mr,
/usr/lib64/libnss_*.so* mr,
/usr/lib/libnss_*.so* mr,
/etc/default/nss r,
# nis
#include <abstractions/nis>
# winbind
#include <abstractions/winbind>
# mdnsd
#include <abstractions/mdns>