1 ## Copyright (C) 1996-2018 The Squid Software Foundation and contributors
3 ## Squid software is distributed under GPLv2+ license and includes
4 ## contributions from numerous individuals and organizations.
5 ## Please see the COPYING and CONTRIBUTORS files for details.
10 #include <tunables/global>
13 #include <abstractions/base>
14 #include <abstractions/kerberosclient>
15 #include <abstractions/nameservice>
20 capability sys_chroot,
22 # allow child processes to run execvp(argv[0], [kidname, ...])
30 @{PROC}/[0-9]*/mounts r,
35 /{,var/}run/squid.pid rwk,
37 /var/spool/squid/** rwk,
38 /usr/lib/squid/* rmix,
39 /usr/share/squid/** r,
42 # allow SMP device access for kids
43 owner /dev/shm/** rmw,
45 # Site-specific additions and overrides. See local/README for details.
46 #include <local/usr.sbin.squid>