ipsec-164.9.tar.gz

[apple/ipsec.git] / racoon.sb

diff --git a/racoon.sb b/racoon.sb
index 88b9a9282ab1aeb7c1b80683e1ca07ef4632cd1d..1d1e9724fffcfb8b580a0c6e5a0b0225076846ac 100644 (file)
--- a/racoon.sb
+++ b/racoon.sb
@@ -1,6 +1,9 @@
 ;; OriginatingProject: ipsec
 (version 1)
 (deny default)
+
+(import "system.sb")
+
 (allow system-socket sysctl-read sysctl-write)
 
 (allow ipc-posix* (ipc-posix-name "com.apple.securityd"))
@@ -97,7 +100,5 @@
 (allow mach-lookup
        (global-name "com.apple.securityd")
        (global-name "com.apple.bsd.dirhelper")
-       (global-name "com.apple.system.DirectoryService.libinfo_v1")
-       (global-name "com.apple.system.DirectoryService.membership_v1")
        (global-name "com.apple.system.logger")
        (global-name "com.apple.system.notification_center"))