2019-05-05 13:23:15 +00:00
|
|
|
# Last Modified: Sat May 4 18:48:24 2019
|
|
|
|
|
#include <tunables/global>
|
|
|
|
|
|
2019-05-05 18:03:09 +00:00
|
|
|
/usr/bin/lokinet {
|
2019-05-05 13:23:15 +00:00
|
|
|
#include <abstractions/base>
|
|
|
|
|
|
|
|
|
|
capability net_admin,
|
|
|
|
|
capability net_bind_service,
|
|
|
|
|
|
|
|
|
|
network inet dgram,
|
|
|
|
|
network inet6 dgram,
|
|
|
|
|
network netlink raw,
|
|
|
|
|
|
|
|
|
|
/dev/net/tun rw,
|
|
|
|
|
/lib/@{multiarch}/ld-*.so mr,
|
2019-05-05 18:03:09 +00:00
|
|
|
/usr/bin/lokinet mr,
|
|
|
|
|
|
|
|
|
|
owner /var/lib/lokinet/ rw,
|
|
|
|
|
owner /var/lib/lokinet/** rwk,
|
2019-05-05 13:23:15 +00:00
|
|
|
|
|
|
|
|
owner @{HOME}/.lokinet/ rw,
|
|
|
|
|
owner @{HOME}/.lokinet/** rwk,
|
|
|
|
|
|
|
|
|
|
}
|
