# as here private data is stored we need tighter perms here
strongswan-starter: non-standard-dir-perm 0700 != 0755 [etc/ipsec.d/private/]
strongswan-starter: non-standard-dir-perm 0700 != 0755 [var/lib/strongswan/]
strongswan-starter: non-standard-file-perm 0600 != 0644 [etc/ipsec.secrets]
# strongswan libraries are installed in /usr/lib/ipsec because they are private
# to the strongSwan project. We still want to split multiple binaries from the lib
custom-library-search-path RUNPATH /usr/lib/ipsec *
