blob: a3471d988259a8dfd00bca2b0b39f7830dfc5f6a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
|
# List of files that get special attribute labeling
# Network related utilities
cap_net_admin=pe /sbin/ethtool
cap_net_admin=pe /sbin/tc
cap_net_admin=pe /bin/ip
cap_net_admin=pe /sbin/iptables-multi
cap_net_admin=pe /sbin/ip6tables-multi
cap_net_admin=pe /usr/sbin/ipset
cap_net_admin=pe /usr/sbin/conntrack
cap_net_admin=pe /usr/sbin/arp
cap_net_admin=pe /usr/sbin/brctl
# Raw sockets
cap_net_raw=pe /usr/bin/tshark
cap_net_raw=pe /usr/sbin/tcpdump
cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap
# Allow changes to system settings
cap_net_admin,cap_sys_admin=pe /sbin/sysctl
# Module install
cap_sys_module=pe /sbin/modprobe
cap_sys_module=pe /sbin/rmmod
# Set time
cap_sys_time=pe /bin/date
cap_sys_time=pe /usr/sbin/ntpdate
|
