/usr/sbin/tcpd o {
        /usr/share/zoneinfo r
	/usr/sbin x
        /usr/lib 
        /lib rx
        /etc/protocols r
        /etc/nsswitch.conf r
        /etc/ld.so.cache r
        /etc/hosts.deny r
        /etc/hosts.allow r
        /dev/log rw
        /usr/sbin/tcpd x
        / h

        -CAP_ALL
}
