| Distribution | Name | Profile | Created At | Changelog | View Count | Username | |||
| opensuse10.3 | /usr/local/BGBillingServer/scheduler.sh | #include <tunables/global> /usr/local/BGBillingServer/scheduler.sh flags=(complain) { #include <abstractions/base> #include <abstractions/bash> /bin/bash ixr, /dev/tty rw, /usr/bin/nohup ixr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java px, /usr/local/BGBillingServer/log/scheduler.out w, /usr/local/BGBillingServer/scheduler.sh mr, } | about 1 year ago | andrew | 164 | gankov | Edit | History | |
| opensuse10.3 | /home/admin/AdventNet/ME/ServiceDesk/bin/run.sh | #include <tunables/global> /home/admin/AdventNet/ME/ServiceDesk/bin/run.sh flags=(complain) { #include <abstractions/base> #include <abstractions/bash> /bin/bash ix, /home/admin/AdventNet/ME/ServiceDesk/bin/run.sh mr, } | about 1 year ago | andrew | 50 | gankov | Edit | History | |
| opensuse10.3 | /usr/local/BGRadiusDialup/radius.sh | #include <tunables/global> /usr/local/BGRadiusDialup/radius.sh flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/nameservice> /bin/bash ixr, /dev/tty rw, /etc/sysconfig/clock r, /proc/*/maps r, /proc/meminfo r, /proc/net/if_inet6 r, /proc/net/ipv6_route r, /proc/stat r, /tmp/** mrw, /usr/bin/nohup ixr, /usr/bin/readlink ixr, /usr/lib64/** mr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java ixr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java.bin ixr, /usr/local/BGRadiusDialup/dictionary.xml r, /usr/local/BGRadiusDialup/lib/ r, /usr/local/BGRadiusDialup/lib/activation.jar mr, /usr/local/BGRadiusDialup/lib/bsh-1.3.0.jar mr, /usr/local/BGRadiusDialup/lib/commons-collections.jar mr, /usr/local/BGRadiusDialup/lib/commons-dbcp-1.1.jar mr, /usr/local/BGRadiusDialup/lib/commons-pool-1.1.jar mr, /usr/local/BGRadiusDialup/lib/dialup.jar mr, /usr/local/BGRadiusDialup/lib/dnsjava.jar mr, /usr/local/BGRadiusDialup/lib/gnu-crypto.jar mr, /usr/local/BGRadiusDialup/lib/log4j-1.2.8.jar mr, /usr/local/BGRadiusDialup/lib/mail.jar mr, /usr/local/BGRadiusDialup/lib/mysql-5.0.3.jar mr, /usr/local/BGRadiusDialup/lib/snmp4_13.jar mr, /usr/local/BGRadiusDialup/lib/xalan.jar mr, /usr/local/BGRadiusDialup/lib/xercesImpl.jar mr, /usr/local/BGRadiusDialup/log/collector.log w, /usr/local/BGRadiusDialup/log/connection.log w, /usr/local/BGRadiusDialup/log/netflow.log w, /usr/local/BGRadiusDialup/log/processor.log w, /usr/local/BGRadiusDialup/log/radius.log w, /usr/local/BGRadiusDialup/log/radius.out w, /usr/local/BGRadiusDialup/log/script.log w, /usr/local/BGRadiusDialup/log4j_radius.properties r, /usr/local/BGRadiusDialup/radius.properties r, /usr/local/BGRadiusDialup/radius.sh mr, /usr/share/zoneinfo/ r, } | about 1 year ago | andrew | 114 | gankov | Edit | History | |
| opensuse10.3 | /usr/local/BGBillingServer/data_loader.sh | #include <tunables/global> /usr/local/BGBillingServer/data_loader.sh flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/nameservice> /bin/bash ixr, /dev/tty rw, /etc/sysconfig/clock r, /proc/*/maps r, /proc/meminfo r, /proc/net/if_inet6 r, /proc/net/ipv6_route r, /proc/stat r, /tmp/hsperfdata_root/ r, /tmp/hsperfdata_root/7926 mrw, /usr/bin/nohup ixr, /usr/bin/readlink ixr, /usr/lib64/** mr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java ixr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java.bin ixr, /usr/local/BGBillingServer/** mr, /usr/local/BGBillingServer/log/dataloader.out w, /usr/share/zoneinfo/ r, } | about 1 year ago | andrew | 46 | gankov | Edit | History | |
| opensuse10.3 | /etc/webmin/start | #include <tunables/global> /etc/webmin/start flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/nameservice> #include <abstractions/perl> capability chown, capability dac_override, capability kill, capability net_admin, capability net_raw, capability setgid, capability setuid, network inet raw, /bin/bash ixr, /bin/cat ixr, /bin/chown ixr, /bin/cp ixr, /bin/df ixr, /bin/hostname ixr, /bin/ps ixr, /bin/pwd ixr, /bin/uname ixr, /dev/mapper/pdc_cffi_part5 r, /dev/mapper/pdc_cffi_part7 r, /dev/mapper/pdc_cffi_part8 r, /dev/tty rw, /etc/SuSE-release r, /etc/at.deny r, /etc/auto.master r, /etc/cron.d/ r, /etc/cron.deny r, /etc/crontab r, /etc/fstab r, /etc/init.d/ r, /etc/init.d/boot.d/ r, /etc/init.d/rc0.d/ r, /etc/init.d/rc1.d/ r, /etc/init.d/rc2.d/ r, /etc/init.d/rc3.d/ r, /etc/init.d/rc4.d/ r, /etc/init.d/rc5.d/ r, /etc/init.d/rc6.d/ r, /etc/init.d/rcS.d/ r, /etc/inittab r, /etc/issue r, /etc/rpc r, /etc/shadow r, /etc/sysconfig/network/ r, /etc/sysconfig/network/ifcfg-eth0 r, /etc/sysconfig/network/ifcfg-eth1 r, /etc/sysconfig/network/ifcfg-lo r, /etc/syslog-ng/syslog-ng.conf rw, /etc/syslog-ng/syslog-ng.conf.lock kw, /etc/syslog-ng/syslog-ng.conf.webmintmp.5849 rw, /etc/syslog-ng/syslog-ng.conf.webmintmp.5883 rw, /etc/syslog-ng/syslog-ng.conf.webmintmp.5915 rw, /etc/webmin/** krw, /etc/webmin/bandwidth/rotate.pl ixr, /etc/webmin/start mr, /etc/xinetd.conf r, /etc/xinetd.d/ r, /etc/xinetd.d/* r, /proc/ r, /proc/*/cmdline r, /proc/*/stat r, /proc/cpuinfo r, /proc/loadavg r, /proc/meminfo r, /proc/net/ip_tables_names r, /proc/swaps r, /proc/uptime r, /sbin/e2label ixr, /sbin/ifconfig Uxr, /sbin/syslog-ng Pxr, /tmp/* rw, /tmp/.webmin/* rw, /usr/bin/crontab ixr, /usr/bin/cvs ixr, /usr/bin/perl ix, /usr/bin/uptime ixr, /usr/libexec/webmin/ r, /usr/libexec/webmin/** r, /usr/libexec/webmin/bandwidth/rotate.pl ixr, /usr/libexec/webmin/cron/cron_editor.pl ixr, /usr/libexec/webmin/miniserv.pl ixr, /usr/sbin/iptables px, /usr/sbin/iptables-save ixr, /usr/sbin/logrotate ixr, /var/log/bandwidth rw, /var/run/nscd/services r, /var/run/syslog-ng.pid r, /var/run/utmp krw, /var/spool/atjobs/ r, /var/spool/cron/tabs/ rw, /var/spool/cron/tabs/root rw, /var/spool/cron/tabs/root.lock kw, /var/spool/cron/tabs/tmp.XXXX9PTJEu rw, /var/spool/cron/tabs/tmp.XXXXKt2zRJ rw, /var/spool/cron/tabs/tmp.XXXXi0auhf rw, /var/webmin/* rw, } | about 1 year ago | andrew | 163 | gankov | Edit | History | |
| opensuse10.3 | /usr/local/BGDialupWiFiAgent/wifi_agent.sh | #include <tunables/global> /usr/local/BGDialupWiFiAgent/wifi_agent.sh flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/nameservice> #include <abstractions/perl> capability net_admin, capability net_raw, network inet raw, /bin/bash ixr, /bin/date ixr, /bin/echo ixr, /dev/tty rw, /etc/SuSE-release r, /etc/fonts/** r, /etc/sysconfig/clock r, /proc/*/fd/ r, /proc/*/maps r, /proc/meminfo r, /proc/net/if_inet6 r, /proc/net/ipv6_route r, /proc/net/psched r, /proc/stat r, /proc/sys/net/ipv4/ip_forward w, /root/.Xauthority r, /sbin/arp Ux, /tmp/ r, /tmp/** mrw, /usr/bin/perl ix, /usr/bin/readlink ixr, /usr/lib64/** mr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java ixr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java.bin ixr, /usr/local/BGDialupWiFiAgent/** mrw, /usr/local/BGDialupWiFiAgent/init.sh ixr, /usr/local/BGDialupWiFiAgent/init_manad.sh ixr, /usr/local/BGDialupWiFiAgent/iptables.sh ixr, /usr/local/BGDialupWiFiAgent/login.sh ixr, /usr/local/BGDialupWiFiAgent/logout.sh ixr, /usr/local/BGDialupWiFiAgent/tell_manad.pl ixr, /usr/local/BGDialupWiFiAgent/wifi_manad.pl ixr, /usr/sbin/iptables mrux, /usr/sbin/tc mrux, /usr/share/X11/locale/en_US.UTF-8/XLC_LOCALE r, /usr/share/X11/locale/locale.alias r, /usr/share/X11/locale/locale.dir r, /usr/share/fonts/** r, /usr/share/ghostscript/fonts/** r, /usr/share/icons/Industrial/cursors/right_ptr r, /usr/share/zoneinfo/ r, /var/cache/fontconfig/17090aa38d5c6f09fb8c5c354938f1d7-x86-64.cache-2 mr, /var/cache/fontconfig/17eac1165263be9f8c818b6f419cf6e6-x86-64.cache-2 mr, /var/cache/fontconfig/2d31a572ce6667f6a0da9c8dc611898b-x86-64.cache-2 r, /var/cache/fontconfig/30786aca7a961ef9f9799e540455831d-x86-64.cache-2 r, /var/cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-x86-64.cache-2 r, /var/cache/fontconfig/4b172ca7f111e3cffadc3636415fead9-x86-64.cache-2 r, /var/cache/fontconfig/5582bcdff229c67b5fec2ece77d58e8f-x86-64.cache-2 r, /var/cache/fontconfig/5ca8086aeacc9c68e81a71e7ef846b3b-x86-64.cache-2 r, /var/cache/fontconfig/77e41c5059666d75f92e318d4be8c21e-x86-64.cache-2 mr, /var/cache/fontconfig/7975540dee8a6ff17f6798a1cba5e67e-x86-64.cache-2 mr, /var/cache/fontconfig/7ef2298fde41cc6eeb7af42e48b7d293-x86-64.cache-2 mr, /var/cache/fontconfig/8d4af663993b81a124ee82e610bb31f9-x86-64.cache-2 mr, /var/cache/fontconfig/96694e2e5c96306c7f07acd6d3b454e6-x86-64.cache-2 mr, /var/cache/fontconfig/a1c95d6dfc9a7b34f44445cf81166004-x86-64.cache-2 r, /var/cache/fontconfig/d458be102e54cf534d1eef0dcbb02d07-x86-64.cache-2 mr, /var/cache/fontconfig/d62e99ef547d1d24cdb1bd22ec1a2976-x86-64.cache-2 mr, /var/cache/fontconfig/df311e82a1a24c41a75c2c930223552e-x86-64.cache-2 mr, /var/run/manad.pid w, } | about 1 year ago | andrew | 72 | gankov | Edit | History | |
| opensuse10.3 | /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java | #include <tunables/global> /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java flags=(complain) { #include <abstractions/base> #include <abstractions/bash> #include <abstractions/nameservice> /bin/bash ixr, /dev/tty rw, /etc/sysconfig/clock r, /proc/*/maps r, /proc/meminfo r, /proc/net/if_inet6 r, /proc/net/ipv6_route r, /proc/stat r, /tmp/** mrw, /usr/bin/readlink ixr, /usr/lib64/** mr, /usr/lib64/jvm/java-1.6.0.u4-sun-1.6.0.u4/jre/bin/java.bin ixr, /usr/local/BGBillingServer/data/data.properties r, /usr/local/BGBillingServer/data/log4j.properties r, /usr/local/BGBillingServer/lib/ r, /usr/local/BGBillingServer/lib/activation.jar mr, /usr/local/BGBillingServer/lib/annotations-api.jar mr, /usr/local/BGBillingServer/lib/avalon-framework.jar mr, /usr/local/BGBillingServer/lib/batik.jar mr, /usr/local/BGBillingServer/lib/bsh-1.3.0.jar mr, /usr/local/BGBillingServer/lib/call.jar mr, /usr/local/BGBillingServer/lib/catalina.jar mr, /usr/local/BGBillingServer/lib/commons-beanutils.jar mr, /usr/local/BGBillingServer/lib/commons-chain.jar mr, /usr/local/BGBillingServer/lib/commons-collections.jar mr, /usr/local/BGBillingServer/lib/commons-dbcp-1.1.jar mr, /usr/local/BGBillingServer/lib/commons-digester.jar mr, /usr/local/BGBillingServer/lib/commons-el.jar mr, /usr/local/BGBillingServer/lib/commons-logging.jar mr, /usr/local/BGBillingServer/lib/commons-pool-1.1.jar mr, /usr/local/BGBillingServer/lib/cos.jar mr, /usr/local/BGBillingServer/lib/dialup.jar mr, /usr/local/BGBillingServer/lib/fop-hyph.jar mr, /usr/local/BGBillingServer/lib/fop.jar mr, /usr/local/BGBillingServer/lib/gnu-crypto.jar mr, /usr/local/BGBillingServer/lib/image-filters.jar mr, /usr/local/BGBillingServer/lib/jasper-compiler-jdt.jar mr, /usr/local/BGBillingServer/lib/jasper-compiler.jar mr, /usr/local/BGBillingServer/lib/jasper-jdt.jar mr, /usr/local/BGBillingServer/lib/jasper-runtime.jar mr, /usr/local/BGBillingServer/lib/jasper.jar mr, /usr/local/BGBillingServer/lib/jasperreports.jar mr, /usr/local/BGBillingServer/lib/jcommon.jar mr, /usr/local/BGBillingServer/lib/jetty-util.jar mr, /usr/local/BGBillingServer/lib/jetty.jar mr, /usr/local/BGBillingServer/lib/jfreechart.jar mr, /usr/local/BGBillingServer/lib/jsch.jar mr, /usr/local/BGBillingServer/lib/jstl.jar mr, /usr/local/BGBillingServer/lib/ldap.jar mr, /usr/local/BGBillingServer/lib/log4j-1.2.8.jar mr, /usr/local/BGBillingServer/lib/mail.jar mr, /usr/local/BGBillingServer/lib/mysql-5.0.3.jar mr, /usr/local/BGBillingServer/lib/npay.jar mr, /usr/local/BGBillingServer/lib/reports.jar mr, /usr/local/BGBillingServer/lib/serializer.jar mr, /usr/local/BGBillingServer/lib/server.jar mr, /usr/local/BGBillingServer/lib/servlet.jar mr, /usr/local/BGBillingServer/lib/smack.jar mr, /usr/local/BGBillingServer/lib/smackx.jar mr, /usr/local/BGBillingServer/lib/snmp4_13.jar mr, /usr/local/BGBillingServer/lib/standard.jar mr, /usr/local/BGBillingServer/lib/struts-core.jar mr, /usr/local/BGBillingServer/lib/struts-taglib.jar mr, /usr/local/BGBillingServer/lib/struts-tiles.jar mr, /usr/local/BGBillingServer/lib/tomcat-coyote.jar mr, /usr/local/BGBillingServer/lib/tomcat-juli.jar mr, /usr/local/BGBillingServer/lib/xalan.jar mr, /usr/local/BGBillingServer/lib/xercesImpl.jar mr, /usr/local/BGBillingServer/log/dataloader.log w, /usr/local/BGBillingServer/log/scheduler.log w, /usr/local/BGBillingServer/log/scheduler.out w, /usr/local/BGBillingServer/log/script.log w, /usr/local/BGBillingServer/log/server.log w, /usr/share/zoneinfo/ r, } | about 1 year ago | andrew | 88 | gankov | Edit | History | |
| opensuse10.3 | /usr/bin/Xvnc | #include <tunables/global> /usr/bin/Xvnc flags=(complain) { #include <abstractions/base> /usr/bin/Xvnc mr, } | about 1 year ago | andrew | 73 | gankov | Edit | History | |
| opensuse10.3 | /usr/sbin/vsftpd | # $Id: usr.sbin.vsftpd 697 2007-05-25 03:09:30Z steve-beattie $ # ------------------------------------------------------------------ # # Copyright (C) 2002-2005 Novell/SUSE # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ #include <tunables/global> /usr/sbin/vsftpd flags=(complain) { #include <abstractions/authentication> #include <abstractions/base> #include <abstractions/nameservice> / r, /dev/urandom r, /etc/fstab r, /etc/hosts.allow r, /etc/hosts.deny r, /etc/mtab r, /etc/shells r, /etc/vsftpd.* r, /etc/vsftpd/* r, /srv/ftp/ r, /srv/ftp/** wr, /usr/sbin/vsftpd rmix, /var/log/vsftpd.log w, /var/log/xferlog w, @{HOMEDIRS} r, @{HOME}/** rwl, } | about 1 year ago | andrew | 97 | gankov | Edit | History |