1
0

usr.sbin.cjdroute 711 B

123456789101112131415161718192021222324252627282930
  1. # Last Modified: Wed Jul 30 11:22:23 CEST 2014
  2. # Written by Sergey "Shnatsel" Davidoff <shnatsel@gmail.com>
  3. # Modified by Claude
  4. # If something doesn't work for you, e.g. if it's outdated
  5. # or if you have a non-standard setup, running aa-logprof should fix it.
  6. #include <tunables/global>
  7. /usr/sbin/cjdroute {
  8. #include <abstractions/base>
  9. #include <abstractions/nameservice>
  10. capability net_admin,
  11. capability net_raw,
  12. capability setuid,
  13. capability sys_chroot,
  14. / r,
  15. /dev/net/tun rw,
  16. /etc/passwd mr,
  17. /proc/sys/kernel/random/uuid r,
  18. /tmp/cjdns_pipe_* rw,
  19. /usr/sbin/cjdroute mrix,
  20. # if you choose to use a pidfile, you'll have to speficy it here as well
  21. }