File thanos.apparmor of Package thanos

# This AppArmor profile is part of the thanos package
# Georg Pfuetzenreuter <mail+apparmor@georg-pfuetzenreuter.net>

abi <abi/3.0>,

include <tunables/global>

profile thanos /usr/bin/thanos {
  include <abstractions/base>
  include <abstractions/nameservice>

  /usr/bin/thanos mr,
  /usr/bin/uname mrix,

  /etc/machine-id r,
  /proc/@{pid}/cgroup r,
  /proc/sys/net/core/somaxconn r,
  owner /proc/@{pid}/cpuset r,
  owner /proc/@{pid}/mountinfo r,
  owner /proc/@{pid}/stat r,

  include if exists <local/thanos>
}