usr.sbin.useradd

   1 # vim:syntax=apparmor
   2 # ------------------------------------------------------------------
   3 #
   4 #    Copyright (C) 2002-2005 Novell/SUSE
   5 #
   6 #    This program is free software; you can redistribute it and/or
   7 #    modify it under the terms of version 2 of the GNU General Public
   8 #    License published by the Free Software Foundation.
   9 #
  10 # ------------------------------------------------------------------
  11
  12 #include <tunables/global>
  13
  14 /usr/sbin/useradd {
  15   #include <abstractions/authentication>
  16   #include <abstractions/base>
  17   #include <abstractions/bash>
  18   #include <abstractions/perl>
  19   #include <abstractions/consoles>
  20   #include <abstractions/nameservice>
  21   #include <abstractions/wutmp>
  22
  23   capability chown,
  24   capability dac_override,
  25   capability fowner,
  26   capability fsetid,
  27   capability sys_resource,
  28
  29   /bin/bash mixr,
  30   /etc/.pwd.lock rwk,
  31   /etc/default/useradd r,
  32   /etc/group* rwl,
  33   /etc/gshadow* rwl,
  34   /etc/login.defs r,
  35   /etc/passwd* rwl,
  36   /etc/shadow* rwl,
  37   /etc/pwdutils/logging r,
  38   /etc/skel r,
  39   /etc/skel/** r,
  40   @{HOMEDIRS}**  rw,
  41   @{PROC}/[0-9]*/mounts r,
  42   @{PROC}/filesystems r,
  43   /usr/lib*/pwdutils/*so* mr,
  44   /usr/sbin/adduser rmix,
  45   /usr/sbin/useradd rmix,
  46   /usr/sbin/useradd.local rmix,
  47   /var/log/faillog rw,
  48   /{,var/}run/nscd.pid rw,
  49   /var/spool/mail/* rw,
  50 }