diff options
| author | Jakob Schlyter <jakob@cvs.openbsd.org> | 2003-02-06 10:55:57 +0000 |
|---|---|---|
| committer | Jakob Schlyter <jakob@cvs.openbsd.org> | 2003-02-06 10:55:57 +0000 |
| commit | e8f7992b9d0436145beb0fba9a8d43ab8f6fee25 (patch) | |
| tree | e932a7db36076cc410c5eae1416efd6c3875cd22 | |
| parent | c6a9aec7b73606d4c779768f6ba1516f1e686f5b (diff) | |
allow to read some directories itself
| -rw-r--r-- | etc/systrace/usr_sbin_named | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/systrace/usr_sbin_named b/etc/systrace/usr_sbin_named index 39a32892b13..5765e0d988b 100644 --- a/etc/systrace/usr_sbin_named +++ b/etc/systrace/usr_sbin_named @@ -1,4 +1,4 @@ -# $OpenBSD: usr_sbin_named,v 1.2 2003/02/04 14:52:51 jakob Exp $ +# $OpenBSD: usr_sbin_named,v 1.3 2003/02/06 10:55:56 jakob Exp $ # # Policy for named that uses named user and chroots to /var/named # This policy works for the default configuration of named. @@ -27,8 +27,11 @@ Policy: /usr/sbin/named, Emulation: native native-fsread: filename eq "/etc/named.keys" then permit native-fsread: filename eq "/etc/rndc.key" then permit native-fsread: filename eq "/etc/spwd.db" then permit + native-fsread: filename eq "/master" then permit native-fsread: filename match "/master/*" then permit + native-fsread: filename eq "/slave" then permit native-fsread: filename match "/slave/*" then permit + native-fsread: filename eq "/standard" then permit native-fsread: filename match "/standard/*" then permit native-fsread: filename match "/usr/lib/*" then permit native-fsread: filename eq "/usr/libexec/ld.so" then permit |