32 lines
506 B
Plaintext
32 lines
506 B
Plaintext
|
abi <abi/3.0>,
|
||
|
|
|
||
|
|
#include <tunables/global>
|
||
|
|
|
||
|
|
profile hostapd /usr/sbin/hostapd {
|
||
|
|
#include <abstractions/base>
|
||
|
|
#include <abstractions/nameservice>
|
||
|
|
|
||
|
|
capability net_admin,
|
||
|
|
capability net_raw,
|
||
|
|
network packet,
|
||
|
|
network raw,
|
||
|
|
|
||
|
|
# for RADIUS
|
||
|
|
network inet dgram,
|
||
|
|
network inet6 dgram,
|
||
|
|
|
||
|
|
# grant read access to config files
|
||
|
|
/etc/hostapd.* r,
|
||
|
|
|
||
|
|
/etc/libnl/classid r,
|
||
|
|
|
||
|
|
#/proc/*/net/psched r,
|
||
|
|
|
||
|
|
# grant access to RFKILL control device
|
||
|
|
/dev/rfkill rw,
|
||
|
|
|
||
|
|
/run/hostapd/ rw,
|
||
|
|
/run/hostapd/* rw,
|
||
|
|
|
||
|
|
}
|