From 7997b0d23671890191a2269fdea8d16c53dfbe05 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sat, 13 Apr 2024 14:15:45 +0200
Subject: Adding debian version 2.4.1-2.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 debian/usr.sbin.kea-dhcp6 | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 debian/usr.sbin.kea-dhcp6

(limited to 'debian/usr.sbin.kea-dhcp6')

diff --git a/debian/usr.sbin.kea-dhcp6 b/debian/usr.sbin.kea-dhcp6
new file mode 100644
index 0000000..a96b0bd
--- /dev/null
+++ b/debian/usr.sbin.kea-dhcp6
@@ -0,0 +1,46 @@
+abi <abi/3.0>,
+
+include <tunables/global>
+
+profile kea-dhcp6 /usr/sbin/kea-dhcp6 {
+  include <abstractions/base>
+  include <abstractions/nameservice>
+
+  # for MySQL access, localhost
+  include <abstractions/mysql>
+  include <abstractions/openssl>
+
+  network inet dgram,
+  network inet stream,
+  network netlink raw,
+  network packet raw,
+
+  /etc/gss/mech.d/ r,
+  /etc/gss/mech.d/* r,
+
+  /etc/kea/ r,
+  /etc/kea/** r,
+  /usr/sbin/kea-dhcp6 mr,
+  /usr/sbin/kea-lfc Px,
+
+  owner /run/kea/kea-dhcp6.kea-dhcp6.pid w,
+  owner /run/lock/kea/logger_lockfile rwk,
+
+  # Control sockets
+  # Before LP: #1863100, these were in /tmp. For compatibility, let's keep both
+  # locations
+  owner /{tmp,run/kea}/kea6-ctrl-socket w,
+  owner /{tmp,run/kea}/kea6-ctrl-socket.lock rwk,
+
+  owner /var/lib/kea/kea-dhcp6-serverid rw,
+
+  # this includes .completed, .output, .pid, .[0-9]
+  owner /var/lib/kea/kea-leases6.csv* rw,
+
+  owner /var/log/kea/kea-dhcp6.log rw,
+  owner /var/log/kea/kea-dhcp6.log.[0-9]* rw,
+  owner /var/log/kea/kea-dhcp6.log.lock rwk,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.sbin.kea-dhcp6>
+}
-- 
cgit v1.2.3