File heisenbridge.apparmor of Package heisenbridge

abi <abi/3.0>,

include <tunables/global>

profile heisenbridge /usr/bin/heisenbridge flags=(attach_disconnected) {
  include <abstractions/base>
  include <abstractions/nameservice>
  include <abstractions/python>
  include <abstractions/openssl>

  /etc/heisenbridge/* r,

  /usr/bin/heisenbridge r,

  owner /proc/@{pid}/fd/ r,
  /proc/@{pid}/stat r,
  /proc/@{pid}/limits r,
  deny /usr/bin/ r,
  deny /usr/bin/uname rx,
  deny /usr/bin/ld.*      rx,
  deny /usr/sbin/ldconfig rx,

  owner /var/lib/heisenbridge/* rwlk,

  /etc/mime.types r,
  /usr/share/misc/magic* r,
  /usr/share/file/magic* r,
  /etc/magic r,

  include if exists <local/heisenbridge>
}