| # Copyright 2021 The ChromiumOS Authors |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| # Type Path Mode User Group Age Arguments |
| |
| # Create state directory for shill. |
| d= /run/shill 0755 shill shill |
| |
| # Create state directory for IPsec. |
| d= /run/ipsec 0770 vpn vpn |
| |
| # Create state directories for entire L2TP/IPsec subtree. |
| d= /run/l2tpipsec_vpn 0770 vpn vpn |
| d= /run/xl2tpd 0770 vpn vpn |
| |
| # Create state directory for WireGuard. |
| d= /run/wireguard 0770 vpn vpn |
| |
| # Create storage for the shill global profile. |
| d= /var/cache/shill 0755 shill shill |
| # Like 'chown -R shill:shill /var/cache/shill' but doesn't follow symlinks. |
| Z /var/cache/shill - shill shill |
| |
| # Shill needs read access to this file, which is part of the in-kernel |
| # Connection Tracking System. |
| z /proc/net/ip_conntrack 440 root shill |
| z /proc/net/nf_conntrack 440 root shill |
| |
| # Shill needs kernel debug access. |
| z- /sys/kernel/debug/ieee80211/phy0/iwlwifi/iwlmvm/fw_dbg_collect 660 root shill |
| |
| # Create private directory for data which needs to persists across sessions. |
| d= /var/lib/shill 0755 shill shill |
| |
| # Create directory for backing files for metrics. |
| d= /var/lib/shill/metrics 0755 shill shill |
