|
|
|
|
# Basic profile for i2pd
|
|
|
|
|
# Should work without modifications with Ubuntu/Debian packages
|
|
|
|
|
# Author: Darknet Villain <supervillain@riseup.net>
|
|
|
|
|
#
|
|
|
|
|
#include <tunables/global>
|
|
|
|
|
|
|
|
|
|
/usr/sbin/i2pd {
|
|
|
|
|
#include <abstractions/base>
|
|
|
|
|
|
|
|
|
|
network inet dgram,
|
|
|
|
|
network inet stream,
|
|
|
|
|
network inet6 dgram,
|
|
|
|
|
network inet6 stream,
|
|
|
|
|
network netlink raw,
|
|
|
|
|
|
|
|
|
|
/etc/gai.conf r,
|
|
|
|
|
/etc/host.conf r,
|
|
|
|
|
/etc/hosts r,
|
|
|
|
|
/etc/nsswitch.conf r,
|
|
|
|
|
/etc/resolv.conf r,
|
|
|
|
|
/run/resolvconf/resolv.conf r,
|
|
|
|
|
/run/systemd/resolve/resolv.conf r,
|
|
|
|
|
/run/systemd/resolve/stub-resolv.conf r,
|
|
|
|
|
|
|
|
|
|
# path specific (feel free to modify if you have another paths)
|
|
|
|
|
/etc/i2pd/** r,
|
|
|
|
|
/run/i2pd/i2pd.pid rwk,
|
|
|
|
|
/var/lib/i2pd/** rw,
|
|
|
|
|
/var/log/i2pd/i2pd.log w,
|
|
|
|
|
/var/run/i2pd/i2pd.pid rwk,
|
|
|
|
|
/usr/sbin/i2pd mr,
|
|
|
|
|
/usr/share/i2pd/** r,
|
|
|
|
|
|
|
|
|
|
# user homedir (if started not by init.d or systemd)
|
|
|
|
|
owner @{HOME}/.i2pd/ rw,
|
|
|
|
|
owner @{HOME}/.i2pd/** rwk,
|
|
|
|
|
}
|
