This file is indexed.

/etc/apparmor.d/usr.sbin.fwknopd is in fwknop-apparmor-profile 2.6.0-2.2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
# Last Modified: Sun Aug 18 22:54:57 2013
# Assumes fwknopd was built with:
#    './configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var'
#include <tunables/global>

/usr/sbin/fwknopd {
  #include <abstractions/base>

  capability ipc_lock,
  capability net_admin,
  capability net_raw,

  network inet raw,
  network packet raw,

  /bin/dash rix,
  /bin/bash rix,
  /etc/fwknop/access.conf r,
  /etc/fwknop/fwknopd.conf r,
  /etc/nsswitch.conf r,
  /etc/passwd r,
  /etc/protocols r,
  /root/.gnupg/* rwkl,
  /run/fwknop/ rw,
  /run/fwknop/* rwk,
  /sbin/xtables-multi rix,
  /usr/bin/gpg rix,
  /usr/sbin/fwknopd mr,
  /var/cache/nscd/passwd r,

}