42a8595256
giving access to functionality that is not available in capability mode sandbox. The functionality can be precisely restricted. Start with the following services: - system.dns - provides API compatible to: - gethostbyname(3), - gethostbyname2(3), - gethostbyaddr(3), - getaddrinfo(3), - getnameinfo(3), - system.grp - provides getgrent(3)-compatible API, - system.pwd - provides getpwent(3)-compatible API, - system.random - allows to obtain entropy from /dev/random, - system.sysctl - provides sysctlbyname(3-compatible API. Sponsored by: The FreeBSD Foundation
103 lines
1.3 KiB
Plaintext
103 lines
1.3 KiB
Plaintext
# $FreeBSD$
|
|
#
|
|
# Please see the file src/etc/mtree/README before making changes to this file.
|
|
#
|
|
|
|
/set type=dir uname=root gname=wheel mode=0755
|
|
.
|
|
bin
|
|
..
|
|
boot
|
|
defaults
|
|
..
|
|
firmware
|
|
..
|
|
kernel
|
|
..
|
|
modules
|
|
..
|
|
zfs
|
|
..
|
|
..
|
|
dev mode=0555
|
|
..
|
|
etc
|
|
X11
|
|
..
|
|
bluetooth
|
|
..
|
|
casper
|
|
..
|
|
defaults
|
|
..
|
|
devd
|
|
..
|
|
gnats
|
|
..
|
|
gss
|
|
..
|
|
mail
|
|
..
|
|
mtree
|
|
..
|
|
ntp mode=0700
|
|
..
|
|
pam.d
|
|
..
|
|
periodic
|
|
daily
|
|
..
|
|
monthly
|
|
..
|
|
security
|
|
..
|
|
weekly
|
|
..
|
|
..
|
|
pkg
|
|
..
|
|
ppp
|
|
..
|
|
rc.d
|
|
..
|
|
security
|
|
..
|
|
skel
|
|
..
|
|
ssh
|
|
..
|
|
ssl
|
|
..
|
|
zfs
|
|
..
|
|
..
|
|
lib
|
|
geom
|
|
..
|
|
..
|
|
libexec
|
|
casper
|
|
..
|
|
resolvconf
|
|
..
|
|
..
|
|
media
|
|
..
|
|
mnt
|
|
..
|
|
proc mode=0555
|
|
..
|
|
rescue
|
|
..
|
|
root
|
|
..
|
|
sbin
|
|
..
|
|
tmp mode=01777
|
|
..
|
|
usr
|
|
..
|
|
var
|
|
..
|
|
..
|