ACC SHELL

# $Id: usr.sbin.named 559 2007-04-10 23:05:33Z agruen $
#
# ------------------------------------------------------------------
#
#    Copyright (C) 2002-2005 Novell/SUSE
#
#    This program is free software; you can redistribute it and/or
#    modify it under the terms of version 2 of the GNU General Public
#    License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# vim:syntax=apparmor
# Last Modified: Wed Aug 17 14:09:24 2005

#include <tunables/global>

/usr/sbin/named {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/xad>

  capability net_bind_service,
  capability setgid,
  capability setuid,
  capability sys_chroot,
  capability sys_resource,

  /** r,
  /dyn/** rwl,
  /usr/bin/dnskeygen mix,
  /usr/bin/dnsquery mix,
  /usr/sbin/named rmix,
  /usr/sbin/named-xfer mix,
  /var/lib/named/** rwl,
  /var/named/** rwl,
  /var/run/named.pid wl,
  /var/run/named/named.pid wl,
  /var/run/ndc wl,
  /slave/* rw,

  /var/opt/novell/xad/ds/krb5kdc/krb5.keytab r,
  /var/tmp/DNS_* rw,
  /tmp/DNS_* rw,
}