File usr.sbin.stud of Package stud

#include <tunables/global>

/usr/sbin/stud {
  #include <abstractions/base>
  #include <abstractions/nameservice>

  capability net_bind_service,
  capability setgid,
  capability setuid,
  capability sys_chroot,

  network tcp,

 #  /etc/ssl/private/somehost.stud.pem r,
}