1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
|
abi <abi/3.0>,
include <tunables/global>
profile kea-ctrl-agent /usr/sbin/kea-ctrl-agent {
include <abstractions/base>
network inet stream,
/etc/kea/ r,
/etc/kea/** r,
/usr/sbin/kea-ctrl-agent mr,
owner /run/kea/kea-ctrl-agent.kea-ctrl-agent.pid w,
owner /run/lock/kea/logger_lockfile rwk,
# Control sockets
# Before LP: #1863100, these were in /tmp. For compatibility, let's keep both
# locations
owner /{tmp,run/kea}/kea-ddns-ctrl-socket rw,
owner /{tmp,run/kea}/kea4-ctrl-socket rw,
owner /{tmp,run/kea}/kea6-ctrl-socket rw,
owner /var/log/kea/kea-ctrl-agent.log rw,
owner /var/log/kea/kea-ctrl-agent.log.[0-9]* rw,
owner /var/log/kea/kea-ctrl-agent.log.lock rwk,
}
|