1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33
|
abi <abi/3.0>,
include <tunables/global>
profile kea-dhcp-ddns /usr/sbin/kea-dhcp-ddns {
include <abstractions/base>
include <abstractions/nameservice>
include <abstractions/openssl>
network inet dgram,
network netlink raw,
/etc/kea/ r,
/etc/kea/** r,
/usr/sbin/kea-dhcp-ddns mr,
owner /run/kea/kea-dhcp-ddns.kea-dhcp-ddns.pid rw,
owner /run/lock/kea/logger_lockfile rwk,
owner /run/kea/logger_lockfile rwk,
# Control sockets
# Before LP: #1863100, these were in /tmp. For compatibility, let's keep both
# locations
owner /{tmp,run/kea}/kea-ddns-ctrl-socket w,
owner /{tmp,run/kea}/kea-ddns-ctrl-socket.lock rwk,
owner /var/log/kea/kea-ddns.log rw,
owner /var/log/kea/kea-ddns.log.[0-9]* rw,
owner /var/log/kea/kea-ddns.log.lock rwk,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.kea-dhcp-ddns>
}
|