File berghain.apparmor of Package berghain

# This AppArmor profile is part of the berghain package
# Georg Pfuetzenreuter <mail+apparmor@georg-pfuetzenreuter.net>

abi <abi/3.0>,

include <tunables/global>

/usr/bin/berghain {
  include <abstractions/base>

  network inet stream,
  network inet6 stream,
  network unix stream,

  /usr/bin/berghain mr,

  /etc/berghain.yaml r,
  /run/berghain/spop.sock w,

  /proc/sys/net/core/somaxconn r,
  /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
  /proc/@{pid}/{cgroup,cpuset,mountinfo} r,


  include if exists <local/berghain>

}