/*
 * Allows install traceroute with setuid bit cleared.
 */

/usr/bin/traceroute {
	uid any
	gid any
	groups no
	
	cap set empty
	cap effective set { 
		raw
	}
	
	exec deny all
}

/usr/sbin/traceroute {
	uid any
	gid any
	groups no
	
	cap set empty
	cap effective set { 
		raw
	}
	
	exec deny all
}
