summaryrefslogtreecommitdiff
path: root/sysconf/capability.conf
diff options
context:
space:
mode:
Diffstat (limited to 'sysconf/capability.conf')
-rw-r--r--sysconf/capability.conf10
1 files changed, 10 insertions, 0 deletions
diff --git a/sysconf/capability.conf b/sysconf/capability.conf
new file mode 100644
index 00000000..0a7235f1
--- /dev/null
+++ b/sysconf/capability.conf
@@ -0,0 +1,10 @@
+# this is a capability file (used in conjunction with the pam_cap.so module)
+
+# Special capability for Vyatta admin
+all %vyattacfg
+
+# Vyatta Operator
+cap_net_admin,cap_sys_boot,cap_audit_write %vyattaop
+
+## 'everyone else' gets no inheritable capabilities
+none *