apparmor/profiles/apparmor.d/usr.sbin.identd
Jamie Strandboge e1ef7e5582 identd pid file location on Debian/Ubuntu
Acked-By: Jamie Strandboge <jamie@canonical.com>
Acked-by: Seth Arnold <seth.arnold@canonical.com>
Acked-by: Steve Beattie <steve@nxnw.org>
2014-09-03 14:47:33 -05:00

32 lines
996 B
Text

# ------------------------------------------------------------------
#
# Copyright (C) 2002-2009 Novell/SUSE
# Copyright (C) 2010 Canonical Ltd.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
#include <tunables/global>
/usr/sbin/identd {
#include <abstractions/base>
#include <abstractions/nameservice>
capability net_bind_service,
capability setgid,
capability setuid,
/etc/identd.conf r,
/etc/identd.key r,
/etc/identd.pid w,
/usr/sbin/identd rmix,
@{PROC}/net/tcp r,
@{PROC}/net/tcp6 r,
/{,var/}run/identd.pid w,
/{,var/}run/identd/ w,
/{,var/}run/identd/identd.pid w,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.identd>
}