# Copyright (C) 2000-2020 Synology Inc. All rights reserved.

#include <abstractions/Contacts/syno/authentication>
#include <abstractions/Contacts/syno/base>
#include <abstractions/Contacts/syno/nameservice>

# capability reference: http://man7.org/linux/man-pages/man7/capabilities.7.html

# socket related
capability block_suspend,

# lower-privilege related
capability fsetid,
capability setgid,
capability setuid,

# some others misc capability
capability chown,
capability dac_read_search,

# grant all *.so reading capability
/volume*/@appstore/Contacts/lib/** mr,
/volume*/@appstore/Contacts/webapi/** mrk,

# for libsynomailplus
/volume*/@appstore/MailPlus-Server/usr/local/lib/** mr,
/volume*/@appstore/MailPlus-Server/bin/syno_mailserver_backend rpux,
