2020-03-10 17:47:41 +03:00
|
|
|
# Last Modified: Tue Mar 10 16:38:14 2020
|
2019-03-09 16:15:14 +03:00
|
|
|
#include <tunables/global>
|
|
|
|
|
|
|
|
|
|
/usr/bin/yggdrasil {
|
|
|
|
|
#include <abstractions/base>
|
|
|
|
|
|
|
|
|
|
capability net_admin,
|
2020-03-10 17:47:41 +03:00
|
|
|
capability net_raw,
|
2019-03-09 16:15:14 +03:00
|
|
|
|
|
|
|
|
network inet stream,
|
2019-03-10 06:34:26 +03:00
|
|
|
network inet dgram,
|
2019-03-09 16:15:14 +03:00
|
|
|
network inet6 dgram,
|
|
|
|
|
network inet6 stream,
|
|
|
|
|
network netlink raw,
|
|
|
|
|
|
2019-03-10 06:34:26 +03:00
|
|
|
/lib/@{multiarch}/ld-*.so mr,
|
2019-03-09 16:15:14 +03:00
|
|
|
/proc/sys/net/core/somaxconn r,
|
2020-03-10 17:47:41 +03:00
|
|
|
owner /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
|
2019-03-09 16:15:14 +03:00
|
|
|
/dev/net/tun rw,
|
|
|
|
|
|
|
|
|
|
/usr/bin/yggdrasil mr,
|
|
|
|
|
/etc/yggdrasil.conf rw,
|
|
|
|
|
/run/yggdrasil.sock rw,
|
|
|
|
|
|
|
|
|
|
}
|
