<aegis>
  <request>
    <credential name="GRP::cal" />
    <for path="/usr/sbin/rdc_cert_verify" id="rdc_cert_verify" />
  </request>
  <request context="INSTALL">
    <credential name="CAP::dac_override"/>
    <credential name="CAP::chown"/>
  </request>

  <!-- for upstart jobs -->
  <request>
    <credential name="CAP::net_raw" />
    <for path="/etc/init/sscd.conf" />
  </request>
  <request>
    <credential name="CAP::net_bind_service" />
    <credential name="CAP::net_raw" />
    <credential name="CAP::net_admin" />
    <for path="/etc/init/xsession/bluetoothd.conf" />
  </request>
  <request>
    <credential name="CAP::chown" />
    <credential name="CAP::fsetid" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <credential name="CAP::sys_chroot" />
    <credential name="CAP::sys_tty_config" />
    <credential name="CAP::sys_resource" />
    <credential name="CAP::net_bind_service" />
    <for path="/etc/init/ssh.conf" />
  </request>
  <request>
    <credential name="CAP::net_admin" />
    <credential name="CAP::sys_admin" />
    <credential name="CAP::sys_ptrace" />
    <credential name="CAP::sys_nice" />
    <credential name="CAP::ipc_lock" />
    <for path="/etc/init/ohmd.conf" />
  </request>
  <request>
    <credential name="CAP::sys_module" />
    <credential name="CAP::net_admin" />
    <credential name="CAP::sys_ptrace" />
    <credential name="CAP::kill" />
    <credential name="CAP::sys_admin" />
    <credential name="CAP::dac_override" />
    <for path="/etc/init/xsession/usb_moded.conf" />
  </request>
  <request>
    <credential name="CAP::sys_nice" />
    <credential name="CAP::sys_resource" />
    <credential name="CAP::net_admin" />
    <credential name="CAP::mknod" />
    <credential name="CAP::sys_module" />
    <credential name="CAP::chown" />
    <credential name="CAP::sys_admin" />
    <credential name="CAP::sys_rawio" />
    <for path="/etc/init/udev.conf" />
  </request>
  <request>
    <credential name="CAP::net_raw" />
    <credential name="CAP::net_admin" />
    <credential name="CAP::kill" />
    <credential name="CAP::sys_module" />
    <credential name="CAP::sys_ptrace" />
    <for path="/etc/init/xsession/icd2.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::net_raw" />
    <for path="/etc/init/stserver-normal.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <for path="/etc/init/stserver.conf" />
  </request>
  <request>
    <credential name="CAP::sys_nice" />
    <credential name="CAP::dac_override" />
    <credential name="CAP::sys_resource" />
    <for path="/etc/init/bme.conf" />
  </request>
  <request>
    <credential name="CAP::sys_time" />
    <for path="/etc/init/xsession/timed.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <credential name="CAP::sys_nice" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/applauncherd.conf" />
  </request>
  <request>
    <credential name="CAP::sys_resource" />
    <credential name="CAP::chown" />
    <credential name="CAP::dac_override" />
    <credential name="CAP::setgid" />
    <credential name="CAP::setuid" />
    <credential name="CAP::sys_boot" />
    <for path="/etc/init/dbus.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <credential name="CAP::chown" />
    <credential name="CAP::kill" />
    <for path="/etc/init/xsession/nped.conf" />
  </request>
  <request>
    <credential name="CAP::net_admin" />
    <credential name="CAP::chown" />
    <credential name="CAP::sys_admin" />
    <credential name="CAP::sys_module" />
    <for path="/etc/init/hal.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <credential name="CAP::sys_resource" />
    <credential name="CAP::chown" />
    <credential name="CAP::fsetid" />
    <for path="/etc/init/pulseaudio.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::net_raw" />
    <for path="/etc/init/infoserver.conf" />
  </request>
  <request>
    <credential name="CAP::sys_nice" />
    <credential name="CAP::ipc_lock" />
    <for path="/etc/init/dsme.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <credential name="CAP::sys_admin" />
    <credential name="CAP::ipc_lock" />
    <for path="/etc/init/aegisfs.conf" />
  </request>
  <request>
    <credential name="CAP::sys_tty_config" />
    <credential name="CAP::mknod" />
    <credential name="CAP::setgid" />
    <credential name="CAP::setuid" />
    <credential name="CAP::ipc_lock" />
    <credential name="CAP::ipc_owner" />
    <for path="/etc/init/xomap.conf" />
  </request>
  <request>
    <credential name="CAP::net_bind_service" />
    <credential name="CAP::net_admin" />
    <credential name="CAP::net_raw" />
    <credential name="CAP::setgid" />
    <credential name="CAP::setuid" />
    <for path="/etc/init/dnsmasq.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <credential name="CAP::sys_admin" />
    <for path="/etc/init/pvrsrv-watch.conf" />
  </request>
  <request>
    <credential name="CAP::net_admin" />
    <credential name="CAP::sys_module" />
    <for path="/etc/init/xsession/wl1271-cal.conf" />
  </request>
  <request>
    <credential name="CAP::sys_tty_config" />
    <credential name="CAP::mac_admin" />
    <credential name="CAP::kill" />
    <credential name="CAP::sys_ptrace" />
    <credential name="CAP::sys_admin" />
    <credential name="CAP::setuid" />
    <credential name="CAP::sys_boot" />
    <for path="/etc/init/shutdown.conf" />
  </request>
  <request>
    <credential match="CAP::*" />
    <for path="/etc/init/ttyS0.conf" />
  </request>
  <request>
    <credential name="CAP::mknod" />
    <credential name="CAP::sys_module" />
    <for path="/etc/init/group-hal.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <for path="/etc/init/sysconfig-middle.conf" />
  </request>
  <request>
    <credential name="CAP::sys_ptrace" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/dbus.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <credential name="CAP::chown" />
    <credential name="CAP::sys_resource" />
    <for path="/etc/init/csd.conf" />
  </request>
  <request>
    <credential name="CAP::sys_module" />
    <credential name="CAP::chown" />
    <for path="/etc/init/sgx.conf" />
  </request>
  <request>
    <credential name="CAP::sys_module" />
    <credential name="CAP::net_admin" />
    <for path="/etc/init/select-usb-module.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <for path="/etc/init/rc-default.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::mknod" />
    <credential name="CAP::chown" />
    <credential name="CAP::net_admin" />
    <for path="/etc/init/sysconfig-early.conf" />
  </request>
  <request>
    <credential name="CAP::kill" />
    <for path="/etc/init/xsession/signal-applauncherd.conf" />
  </request>
  <request>
    <credential name="CAP::sys_time" />
    <for path="/etc/init/timeconfig.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <credential name="CAP::chown" />
    <credential name="dsme::DeviceStateControl" />
    <for path="/etc/init/sysconfig-late.conf" />
  </request>
  <request>
    <credential name="CAP::sys_tty_config" />
    <credential name="CAP::mac_admin" />
    <credential name="CAP::kill" />
    <credential name="CAP::sys_ptrace" />
    <credential name="CAP::sys_admin" />
    <credential name="CAP::setuid" />
    <credential name="CAP::sys_boot" />
    <for path="/etc/init/reboot.conf" />
  </request>
  <request>
    <credential name="dsme::DeviceStateControl" />
    <credential name="CAP::sys_module" />
    <credential name="CAP::mknod" />
    <credential name="CAP::sys_ptrace" />
    <credential name="CAP::sys_boot" />
    <for path="/etc/init/check_malf.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <credential name="CAP::chown" />
    <credential name="CAP::mknod" />
    <for path="/etc/init/check_wipe.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <for path="/etc/init/klogd.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::net_bind_service" />
    <for path="/etc/init/syslogd.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::chown" />
    <for path="/etc/init/mount-home.conf" />
  </request>
  <request>
    <credential name="CAP::chown" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/sysuid.conf" />
  </request>
  <request>
    <credential name="CAP::chown" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/act-dead-charging-indicator.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mstartup.conf" />
  </request>
  <request>
    <credential name="CAP::chown" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/immvibed.conf" />
  </request>
  <request>
    <credential name="CAP::sys_module" />
    <for path="/etc/init/xsession/extra-modules.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mthemedaemon.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/tracker-reindex.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mdecorator.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mtwitter.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/conndlgs.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/swipe-tutorial.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/operator-startup.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/applifed.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/smartsearch.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/celluid.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/clipboard.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/msyncd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mcompositor.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/feedengine.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/contactsd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/meego-im-uiserver.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ngfd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/bugreporter.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mission-control.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/crash-reporter-daemon.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/tracker-stop.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/presenced.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/immvbsd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/webupload-recovery.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ohm-session-agent.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/commhistoryd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/active-syncd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/pkgm-timed-checks.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ombengine.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mprogressindicator.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mthome.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/usetimed.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ui-startup/start-cherry.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ui-startup/start-celluid.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ui-startup/start-devlock.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ui-startup/start-suw.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/ui-startup/start-desktop.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mfeedbackd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/devicelockd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/cherryui.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/tracker-miner.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <credential name="CAP::dac_override" />
    <credential name="CAP::chown" />
    <for path="/etc/init/xsession/messageserver.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/backup-framework.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/calendar-icon-update.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/mfacebookd.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/simatkuid.conf" />
  </request>
  <request>
    <credential name="CAP::kill" />
    <for path="/etc/init/xsession/mwelcome.conf" />
  </request>
  <request>
    <credential name="CAP::kill" />
    <for path="/etc/init/xsession/spinner.conf" />
  </request>
  <request>
    <credential name="CAP::kill" />
    <for path="/etc/init/xsession/mpi-animation.conf" />
  </request>
  <request>
    <credential name="CAP::chown" />
    <credential name="CAP::fowner" />
    <credential name="CAP::dac_override" />
    <credential name="CAP::sys_resource" />
    <for path="/etc/init/tracker-init.conf" />
  </request>
  <request>
    <credential name="CAP::mknod" />
    <credential name="CAP::sys_module" />
    <credential name="CAP::sys_admin" />
    <for path="/etc/init/enable-swap.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::sys_tty_config" />
    <credential name="CAP::sys_boot" />
    <credential name="CAP::kill" />
    <for path="/etc/init/reboot-failsafe.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::sys_tty_config" />
    <credential name="CAP::sys_boot" />
    <credential name="CAP::kill" />
    <for path="/etc/init/shutdown-failsafe.conf" />
  </request>
  <request>
    <credential name="CAP::sys_admin" />
    <credential name="CAP::sys_module" />
    <for path="/etc/init/testserver.conf" />
  </request>
  <request>
    <credential name="dsme::DeviceStateControl" />
    <for path="/etc/init/dsme-thermal.conf" />
  </request>
  <request>
    <credential name="dsme::DeviceStateControl" />
    <for path="/etc/init/group-dsme.conf" />
  </request>
  <request>
    <credential name="dsme::DeviceStateControl" />
    <credential name="CAP::sys_module" />
    <credential name="CAP::mknod" />
    <credential name="CAP::sys_ptrace" />
    <credential name="CAP::sys_boot" />
    <for path="/etc/init/runlevel-switch.conf" />
  </request>
  <request>
    <credential name="CAP::dac_override" />
    <for path="/etc/init/flash-check.conf" />
  </request>
  <request>
    <credential name="CAP::setuid" />
    <credential name="CAP::setgid" />
    <for path="/etc/init/xsession/dlna-profiler.conf" />
  </request>
</aegis>
