# Last Modified: Wed Oct  3 10:38:21 2007
# Author: John Dong <jdong@ubuntu.com>
#include <tunables/global>
/usr/sbin/dnsmasq {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/nis>

  capability net_bind_service,
  capability setgid,
  capability setuid,

  /etc/dnsmasq.conf r,
  /usr/sbin/dnsmasq mr,
  /var/run/dnsmasq.pid w,
  /var/lib/misc/dnsmasq.leases rw, # Required only for DHCP server usage
}