/*
 * Allows install traceroute with setuid bit cleared.
 *
 * Follow README file to make privileged non-setuid programs to be secure.
 */

/usr/bin/traceroute {
	uid any
	gid any
	groups no
	
	cap set empty
	cap effective set { 
		raw
	}
	
	exec deny all
}
