/usr/sbin/ipop3d o {
	/etc/grsec h
	/etc r
        /tmp rw
	/dev/urandom r
	/dev/log rw
        /home rw
        /var/mail rw
        /usr/share/zoneinfo r
        /usr/lib rx
	/lib rx
        /usr/bin/mlock x
	/usr/sbin/ipop3d x
	/ h

	-CAP_ALL
	+CAP_SETGID
	+CAP_SETUID

	RES_CRASH 1 10m

	connect {
		disabled
	}

	bind {
		disabled
	}
}
