# original file superseded by creole
%if %%getVar('ad_internal_dns_backend', 'oui') == 'non'
/var/lib/samba/lib/** rm,
/var/lib/samba/private/dns.keytab r,
/var/lib/samba/bind-dns/** rwk,
/var/lib/samba/private/dns/** rwk,
/usr/lib/x86_64-linux-gnu/samba/** m,
/usr/lib/x86_64-linux-gnu/ldb/** m,
/run/samba/winbindd/pipe rw,
%end if