1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
#include <tunables/global>
/usr/sbin/tkiptun-ng {
#include <abstractions/base>
#include <abstractions/private-files-strict>
capability net_admin,
capability net_raw,
capability setuid,
capability sys_module,
network packet raw,
deny @{HOME}/.** rw,
@{HOME}/** r,
/bin/ r,
/bin/*sh Cx,
/usr/sbin/tkiptun-ng mr,
/proc/*/net/psched r,
/sbin/ r,
/sbin/iwpriv Cx,
/tmp/ r,
/usr/bin/ r,
/usr/local/bin/ r,
/usr/local/sbin/ r,
/usr/sbin/ r,
profile /bin/*sh {
#include <abstractions/base>
/bin/*sh mr,
/bin/ls rix,
/proc/filesystems r,
/sys/class/ieee80211/ r,
}
profile /sbin/iwpriv {
#include <abstractions/base>
capability net_admin,
capability sys_module,
network inet dgram,
/sbin/iwpriv mr,
}
}
|
