1 files changed, 33 insertions, 0 deletions
diff --git a/debian/usr.sbin.kea-dhcp-ddns b/debian/usr.sbin.kea-dhcp-ddns
new file mode 100644
index 0000000..5e7aa51
--- /dev/null
+++ b/debian/usr.sbin.kea-dhcp-ddns
@@ -0,0 +1,33 @@
+abi <abi/3.0>,
+
+include <tunables/global>
+
+profile kea-dhcp-ddns /usr/sbin/kea-dhcp-ddns {
+  include <abstractions/base>
+  include <abstractions/nameservice>
+  include <abstractions/openssl>
+
+  network inet dgram,
+  network netlink raw,
+
+  /etc/kea/ r,
+  /etc/kea/** r,
+  /usr/sbin/kea-dhcp-ddns mr,
+
+  owner /run/kea/kea-dhcp-ddns.kea-dhcp-ddns.pid w,
+  owner /run/lock/kea/logger_lockfile rwk,
+  owner /run/kea/logger_lockfile rwk,
+
+  # Control sockets
+  # Before LP: #1863100, these were in /tmp. For compatibility, let's keep both
+  # locations
+  owner /{tmp,run/kea}/kea-ddns-ctrl-socket w,
+  owner /{tmp,run/kea}/kea-ddns-ctrl-socket.lock rwk,
+
+  owner /var/log/kea/kea-ddns.log rw,
+  owner /var/log/kea/kea-ddns.log.[0-9]* rw,
+  owner /var/log/kea/kea-ddns.log.lock rwk,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.sbin.kea-dhcp-ddns>
+}